VDB
CVE-2024-44201
CVE-2024-44201
PUBLISHED
CVSS 8.699999809265137 HIGH
Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch. Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.
EPSS 0.02% · 5.9th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.02%
5.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Apple macOS <13.7.2 | |
| Apple | Apple macOS <14.7.2 | |
| Apple | Apple iPadOS <18.2 | |
| Apple | Apple iOS <18.2 | |
| Apple | Apple macOS Sequoia <15.1 | |
| Apple | Apple iPadOS <17.7.3 | |
| Apple | Apple macOS Ventura <13.7.1 | |
| Apple | Apple macOS Sonoma <14.7.1 | |
| Apple | Apple macOS <15.2 |
Exploit Intelligence
- http://seclists.org/fulldisclosure/2024/Dec/9 (circl)
- http://seclists.org/fulldisclosure/2024/Dec/8 (circl)
- http://seclists.org/fulldisclosure/2024/Dec/6 (circl)
- https://support.apple.com/en-us/121840 (circl)
- https://support.apple.com/en-us/121563 (circl)
- https://support.apple.com/en-us/121842 (circl)
- https://support.apple.com/en-us/121838 (circl)
- https://cybersecuritynews.com/macos-sandbox-vulnerability-cve-2024-54498-poc-exploit-released/ (certbund)
- macos_v1_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
…and 22 more exploits
Timeline
- Oct 28, 2024 CVE Published
- Dec 12, 2024 EPSS Score
- Dec 29, 2024 EPSS Score
- Jan 14, 2025 EPSS Score
- Jan 31, 2025 EPSS Score
- Feb 17, 2025 EPSS Score
- Mar 5, 2025 EPSS Score
- Mar 22, 2025 EPSS Score
- Apr 8, 2025 EPSS Score
- Apr 25, 2025 EPSS Score
- May 11, 2025 EPSS Score
- May 28, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3291.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3291 advisory
- https://lists.apple.com/archives/security-announce/2024/Oct/msg00003.html advisory
- https://lists.apple.com/archives/security-announce/2024/Oct/msg00004.html advisory
- https://lists.apple.com/archives/security-announce/2024/Oct/msg00005.html advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3692.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3692 advisory
- https://lists.apple.com/archives/security-announce/2024/Dec/msg00002.html advisory
- https://lists.apple.com/archives/security-announce/2024/Dec/msg00003.html advisory
- https://lists.apple.com/archives/security-announce/2024/Dec/msg00004.html advisory
- https://jhftss.github.io/CVE-2024-54527-MediaLibraryService-Full-TCC-Bypass/ advisory
- https://cybersecuritynews.com/macos-sandbox-vulnerability-cve-2024-54498-poc-exploit-released/ exploit
- https://github.com/koreacsl/SysBumps advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3691.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3691 advisory
- https://lists.apple.com/archives/security-announce/2024/Dec/msg00000.html advisory
- https://lists.apple.com/archives/security-announce/2024/Dec/msg00001.html advisory