CVE-2024-54505highCWE-843

CVE-2024-54505: fallo de gravedad alta en Apple Safari

Publicada el 11 dic 2024 · Actualizada el 04 nov 2026

Seguir esta CVE + Monitorear macOS + Monitorear iOS

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.8epss 1.1%

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Apple · iOS and iPadOS Apple · iPadOS Apple · macOS Apple · Safari Apple · tvOS Apple · visionOS Apple · watchOS

CVEs relacionadas — Apple Safari

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2021-30657MEDIUMCVE-2021-30657EPSS 68.5%KEV CVE-2025-43300CRITICALCVE-2025-43300EPSS 65.2%KEV CVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 51.5%KEV CVE-2021-30807HIGHCVE-2021-30807EPSS 28.8%KEV

Referencias

http://seclists.org/fulldisclosure/2024/Dec/10 http://seclists.org/fulldisclosure/2024/Dec/13 http://seclists.org/fulldisclosure/2024/Dec/6 http://seclists.org/fulldisclosure/2024/Dec/7 https://lists.debian.org/debian-lts-announce/2025/01/msg00002.html https://support.apple.com/en-us/121837 https://support.apple.com/en-us/121838 https://support.apple.com/en-us/121839 https://support.apple.com/en-us/121843 https://support.apple.com/en-us/121844 https://support.apple.com/en-us/121845 https://support.apple.com/en-us/121846