Threats tagged 'ghsa-6cpp-mpjx-cx8v'

CVE-2024-44309 is a cookie management vulnerability in Apple Safari and related operating systems that was addressed by improved state management. The flaw could allow processing of maliciously crafted web content to lead to a cross-site scripting (XSS) attack. Apple fixed this issue in Safari 18.1.1, iOS 17.7.2 and 18.1.1, iPadOS 17.7.2 and 18.1.1, macOS Sequoia 15.1.1, and visionOS 2.1.1. Apple is aware of reports that this vulnerability may have been actively exploited on Intel-based Mac systems.