Search for vulnerabilities
Vulnerability details: VCID-p6va-qskk-ska9
Vulnerability ID VCID-p6va-qskk-ska9
Aliases CVE-2024-44185
Summary The issue was addressed with improved checks. This issue is fixed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.
Status Published
Exploitability 0.5
Weighted Severity 5.0
Risk 2.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-788 Access of Memory Location After End of Buffer
System Score Found at
cvssv3 5.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-44185.json
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00042 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00046 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00066 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00075 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
epss 0.00077 https://api.first.org/data/v1/epss?cve=CVE-2024-44185
cvssv3.1 6.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 5.5 https://nvd.nist.gov/vuln/detail/CVE-2024-44185
cvssv3.1 5.5 https://nvd.nist.gov/vuln/detail/CVE-2024-44185
cvssv3.1 5.4 https://support.apple.com/en-us/120909
cvssv3.1 5.5 https://support.apple.com/en-us/120909
ssvc Track https://support.apple.com/en-us/120909
ssvc Track https://support.apple.com/en-us/120909
cvssv3.1 5.5 https://support.apple.com/en-us/120911
cvssv3.1 5.5 https://support.apple.com/en-us/120911
ssvc Track https://support.apple.com/en-us/120911
ssvc Track https://support.apple.com/en-us/120911
cvssv3.1 5.4 https://support.apple.com/en-us/120913
cvssv3.1 5.5 https://support.apple.com/en-us/120913
ssvc Track https://support.apple.com/en-us/120913
ssvc Track https://support.apple.com/en-us/120913
cvssv3.1 5.4 https://support.apple.com/en-us/120914
cvssv3.1 5.5 https://support.apple.com/en-us/120914
ssvc Track https://support.apple.com/en-us/120914
ssvc Track https://support.apple.com/en-us/120914
cvssv3.1 5.5 https://support.apple.com/en-us/120915
ssvc Track https://support.apple.com/en-us/120915
cvssv3.1 5.4 https://support.apple.com/en-us/120916
cvssv3.1 5.5 https://support.apple.com/en-us/120916
ssvc Track https://support.apple.com/en-us/120916
ssvc Track https://support.apple.com/en-us/120916
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-44185.json
https://api.first.org/data/v1/epss?cve=CVE-2024-44185
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-44185
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://support.apple.com/en-us/120915
120909 https://support.apple.com/en-us/120909
120911 https://support.apple.com/en-us/120911
120913 https://support.apple.com/en-us/120913
120914 https://support.apple.com/en-us/120914
120916 https://support.apple.com/en-us/120916
2323263 https://bugzilla.redhat.com/show_bug.cgi?id=2323263
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
CVE-2024-44185 https://nvd.nist.gov/vuln/detail/CVE-2024-44185
RHSA-2024:8180 https://access.redhat.com/errata/RHSA-2024:8180
RHSA-2024:9553 https://access.redhat.com/errata/RHSA-2024:9553
RHSA-2024:9636 https://access.redhat.com/errata/RHSA-2024:9636
RHSA-2024:9637 https://access.redhat.com/errata/RHSA-2024:9637
RHSA-2024:9638 https://access.redhat.com/errata/RHSA-2024:9638
RHSA-2024:9646 https://access.redhat.com/errata/RHSA-2024:9646
RHSA-2024:9653 https://access.redhat.com/errata/RHSA-2024:9653
RHSA-2024:9679 https://access.redhat.com/errata/RHSA-2024:9679
RHSA-2024:9680 https://access.redhat.com/errata/RHSA-2024:9680
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-44185.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-44185
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-44185
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://support.apple.com/en-us/120909
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://support.apple.com/en-us/120909
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:04:22Z/ Found at https://support.apple.com/en-us/120909
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:14:04Z/ Found at https://support.apple.com/en-us/120909
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://support.apple.com/en-us/120911
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://support.apple.com/en-us/120911
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:12:54Z/ Found at https://support.apple.com/en-us/120911
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:14:04Z/ Found at https://support.apple.com/en-us/120911
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://support.apple.com/en-us/120913
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://support.apple.com/en-us/120913
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:04:22Z/ Found at https://support.apple.com/en-us/120913
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:14:04Z/ Found at https://support.apple.com/en-us/120913
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://support.apple.com/en-us/120914
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://support.apple.com/en-us/120914
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:04:22Z/ Found at https://support.apple.com/en-us/120914
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:14:04Z/ Found at https://support.apple.com/en-us/120914
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://support.apple.com/en-us/120915
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:14:04Z/ Found at https://support.apple.com/en-us/120915
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Found at https://support.apple.com/en-us/120916
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://support.apple.com/en-us/120916
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:14:04Z/ Found at https://support.apple.com/en-us/120916
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-24T18:04:22Z/ Found at https://support.apple.com/en-us/120916
Exploit Prediction Scoring System (EPSS)
Percentile 0.09786
EPSS Score 0.00042
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2024-10-24T19:38:30.430631+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2024/44xxx/CVE-2024-44185.json 34.0.2