Apple Urgently Patches Actively Exploited Zero-Days

November 20, 2024 at 11:13AM Apple has released security updates for two zero-day vulnerabilities, CVE-2024-44308 and CVE-2024-44309, affecting multiple operating systems and Safari. These vulnerabilities could lead to arbitrary code execution and cross-site scripting attacks. Users are urged to update their devices to mitigate risks of exploitation. **Meeting Takeaways:** 1. **Security Updates Released:** Apple has … Read more

About the security content of Safari 18.1.1 – Apple Support

November 19, 2024 at 04:54PM Apple addressed two vulnerabilities in Safari 18.1.1 for macOS Ventura and Sonoma, released on November 19, 2024. CVE-2024-44308 involves arbitrary code execution from malicious web content, while CVE-2024-44309 relates to cross-site scripting attacks. Both issues may have been actively exploited on Intel-based Mac systems. ### Meeting Notes Summary **Release Information** … Read more