High WID-SEC-2024-3303 4 CVEs

Apple Safari: Mehrere Schwachstellen

Published Oct 29, 2024 · Updated Oct 29, 2024 · de-DE

Vendor: Apple Product: Safari Platform: macOS

Summary

Ein anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 4

High 8.8

CVE-2024-44259

This issue was addressed through improved state management. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 1…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 28, 2024
Medium 5.4

CVE-2024-44296

The issue was addressed with improved checks. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 28, 2024
Medium 5.3

CVE-2024-44229

An information leakage was addressed with additional validation. This issue is fixed in Safari 18.1, iOS 18.1 and iPadO…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers

Oct 28, 2024
Medium 4.3

CVE-2024-44244

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 28, 2024

Revision history

2024-10-29 #1
Initiale Fassung

References

Apple Security Advisory vom 2024-10-29
https://lists.apple.com/archives/security-announce/2024/Oct/msg00009.html