{"history":[{"alert":0,"cve":"CVE-2024-44308","id":22671,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.09852, \"percentile\": 0.95628}"},{"alert":0,"cve":"CVE-2024-44308","id":20291,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.09852, \"percentile\": 0.956}"},{"alert":0,"cve":"CVE-2024-44308","id":18260,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.09852, \"percentile\": 0.95595}"},{"alert":0,"cve":"CVE-2024-44308","id":16324,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.09852, \"percentile\": 0.95594}"},{"alert":0,"cve":"CVE-2024-44308","id":14302,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.09852, \"percentile\": 0.95591}"},{"alert":0,"cve":"CVE-2024-44308","id":12084,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.09852, \"percentile\": 0.95585}"},{"alert":0,"cve":"CVE-2024-44308","id":10070,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.09852, \"percentile\": 0.95581}"},{"alert":0,"cve":"CVE-2024-44308","id":7619,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.09852, \"percentile\": 0.95577}"},{"alert":1,"cve":"CVE-2024-44308","id":6047,"kind":"cna","observed_at":1793744401,"payload":"{\"containers\": {\"adp\": [{\"affected\": [{\"cpes\": [\"cpe:2.3:a:apple:safari:-:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"safari\", \"vendor\": \"apple\", \"versions\": [{\"lessThan\": \"18.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"macos\", \"vendor\": \"apple\", \"versions\": [{\"lessThan\": \"15.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:o:apple:visionos:-:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"visionos\", \"vendor\": \"apple\", \"versions\": [{\"lessThan\": \"2.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:iphone:*\"], \"defaultStatus\": \"unknown\", \"product\": \"iphone_os\", \"vendor\": \"apple\", \"versions\": [{\"lessThan\": \"17.7\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}, {\"lessThan\": \"18.1\", \"status\": \"affected\", \"version\": \"18.0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:iphone:*\"], \"defaultStatus\": \"unknown\", \"product\": \"iphone_os\", \"vendor\": \"apple\", \"versions\": [{\"lessThan\": \"17.7\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}, {\"lessThan\": \"18.1\", \"status\": \"affected\", \"version\": \"18.0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:o:apple:ipad_os:-:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"ipad_os\", \"vendor\": \"apple\", \"versions\": [{\"lessThan\": \"17.7\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}, {\"lessThan\": \"18.1\", \"status\": \"affected\", \"version\": \"18.0\", \"versionType\": \"custom\"}]}, {\"cpes\": [\"cpe:2.3:o:apple:ipad_os:-:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unknown\", \"product\": \"ipad_os\", \"vendor\": \"apple\", \"versions\": [{\"lessThan\": \"17.7\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}, {\"lessThan\": \"18.1\", \"status\": \"affected\", \"version\": \"18.0\", \"versionType\": \"custom\"}]}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2024-44308\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2024-11-23T04:55:46.745399Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2024-11-21\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-44308\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-noinfo Not enough information\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T22:55:35.607Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-44308\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-11-21T00:00:00.000Z\", \"value\": \"CVE-2024-44308 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2025-11-03T22:13:32.370Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2024/12/msg00003.html\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Nov/16\"}], \"title\": \"CVE Program Container\"}], \"cna\": {\"affected\": [{\"product\": \"Safari\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"18.1.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"product\": \"iOS and iPadOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"17.7.2\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}, {\"lessThan\": \"18.1.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"product\": \"macOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"15.1.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"product\": \"visionOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"2.1.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.\", \"lang\": \"en\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-04-02T18:23:18.275Z\", \"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\"}, \"references\": [{\"url\": \"https://support.apple.com/en-us/121752\"}, {\"url\": \"https://support.apple.com/en-us/121753\"}, {\"url\": \"https://support.apple.com/en-us/121754\"}, {\"url\": \"https://support.apple.com/en-us/121755\"}, {\"url\": \"https://support.apple.com/en-us/121756\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"assignerShortName\": \"apple\", \"cveId\": \"CVE-2024-44308\", \"datePublished\": \"2024-11-19T23:43:50.135Z\", \"dateReserved\": \"2024-08-20T21:45:40.801Z\", \"dateUpdated\": \"2026-04-02T18:23:18.275Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2024-44308","id":5396,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.09852, \"percentile\": 0.95569}"},{"alert":0,"cve":"CVE-2024-44308","id":3178,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.09852, \"percentile\": 0.95564}"},{"alert":1,"cve":"CVE-2024-44308","id":547,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2024-44308\", \"cwes\": [], \"dateAdded\": \"2024-11-21\", \"dueDate\": \"2024-12-12\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://support.apple.com/en-us/121752, https://support.apple.com/en-us/121753, https://support.apple.com/en-us/121754, https://support.apple.com/en-us/121755, https://support.apple.com/en-us/121756 ; https://nvd.nist.gov/vuln/detail/CVE-2024-44308\", \"product\": \"Multiple Products\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.\", \"vendorProject\": \"Apple\", \"vulnerabilityName\": \"Apple Multiple Products Code Execution Vulnerability\"}"}],"record":{"affected":[{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"18.1.1","status":"affected","version":"0","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"17.7.2","status":"affected","version":"0","versionType":"custom"},{"lessThan":"18.1.1","status":"affected","version":"0","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"15.1.1","status":"affected","version":"0","versionType":"custom"}]},{"product":"visionOS","vendor":"Apple","versions":[{"lessThan":"2.1.1","status":"affected","version":"0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:a:apple:safari:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"safari","vendor":"apple","versions":[{"lessThan":"18.1","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"macos","vendor":"apple","versions":[{"lessThan":"15.1","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:visionos:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"visionos","vendor":"apple","versions":[{"lessThan":"2.1","status":"affected","version":"0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:iphone:*"],"defaultStatus":"unknown","product":"iphone_os","vendor":"apple","versions":[{"lessThan":"17.7","status":"affected","version":"0","versionType":"custom"},{"lessThan":"18.1","status":"affected","version":"18.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:iphone:*"],"defaultStatus":"unknown","product":"iphone_os","vendor":"apple","versions":[{"lessThan":"17.7","status":"affected","version":"0","versionType":"custom"},{"lessThan":"18.1","status":"affected","version":"18.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:ipad_os:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"ipad_os","vendor":"apple","versions":[{"lessThan":"17.7","status":"affected","version":"0","versionType":"custom"},{"lessThan":"18.1","status":"affected","version":"18.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:apple:ipad_os:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"ipad_os","vendor":"apple","versions":[{"lessThan":"17.7","status":"affected","version":"0","versionType":"custom"},{"lessThan":"18.1","status":"affected","version":"18.0","versionType":"custom"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2024-44308","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-11-23T04:55:46.745399Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2024-11-21","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-44308"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"description":"CWE-noinfo Not enough information","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T22:55:35.607Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-44308"}],"timeline":[{"lang":"en","time":"2024-11-21T00:00:00.000Z","value":"CVE-2024-44308 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2025-11-03T22:13:32.370Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"url":"https://lists.debian.org/debian-lts-announce/2024/12/msg00003.html"},{"url":"http://seclists.org/fulldisclosure/2024/Nov/16"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"18.1.1","status":"affected","version":"0","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"17.7.2","status":"affected","version":"0","versionType":"custom"},{"lessThan":"18.1.1","status":"affected","version":"0","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"15.1.1","status":"affected","version":"0","versionType":"custom"}]},{"product":"visionOS","vendor":"Apple","versions":[{"lessThan":"2.1.1","status":"affected","version":"0","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems."}],"problemTypes":[{"descriptions":[{"description":"Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-04-02T18:23:18.275Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"url":"https://support.apple.com/en-us/121752"},{"url":"https://support.apple.com/en-us/121753"},{"url":"https://support.apple.com/en-us/121754"},{"url":"https://support.apple.com/en-us/121755"},{"url":"https://support.apple.com/en-us/121756"}]}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2024-44308","datePublished":"2024-11-19T23:43:50.135Z","dateReserved":"2024-08-20T21:45:40.801Z","dateUpdated":"2026-04-02T18:23:18.275Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794219601,"cve":"CVE-2024-44308","description":"The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.","epss":{"date":"2026-11-12","epss":0.09852,"percentile":0.95628},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2024-44308","cwes":[],"dateAdded":"2024-11-21","dueDate":"2024-12-12","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://support.apple.com/en-us/121752, https://support.apple.com/en-us/121753, https://support.apple.com/en-us/121754, https://support.apple.com/en-us/121755, https://support.apple.com/en-us/121756 ; https://nvd.nist.gov/vuln/detail/CVE-2024-44308","product":"Multiple Products","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution.","vendorProject":"Apple","vulnerabilityName":"Apple Multiple Products Code Execution Vulnerability"},"kev_checked":1794522003,"products":"Apple Safari, Apple iOS and iPadOS, Apple macOS, Apple visionOS","references":["https://support.apple.com/en-us/121752","https://support.apple.com/en-us/121753","https://support.apple.com/en-us/121754","https://support.apple.com/en-us/121755","https://support.apple.com/en-us/121756","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-44308","https://lists.debian.org/debian-lts-announce/2024/12/msg00003.html","http://seclists.org/fulldisclosure/2024/Nov/16"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Apple Multiple Products Code Execution Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}