{"cvss":0.0,"datePublished":"2024-11-21","dateUpdated":"2024-11-21","description":"Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack.","dueDate":"2024-12-12","id":"CVE-2024-44309","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://support.apple.com/en-us/121752, https://support.apple.com/en-us/121753, https://support.apple.com/en-us/121754, https://support.apple.com/en-us/121755, https://support.apple.com/en-us/121756 ; https://nvd.nist.gov/vuln/detail/CVE-2024-44309","product":"Multiple Products","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","vendor":"Apple"}