A cookie management issue was addressed with improved state management.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• apple ipadosbefore 17.7.2
• apple ipados18.0 and later · before 18.1.1
• apple iphone osbefore 17.7.2
• apple iphone os18.0 and later · before 18.1.1
• apple macos15.0 and later · before 15.1.1
• apple safaribefore 18.1.1
• apple visionosbefore 2.1.1
• debian debian linux11.0

Versions reported by the vendor

Affected version ranges reported by the assigning authority (apple). Independent of NVD's CPE analysis and usually ahead of it.

• Apple iOS and iPadOS

  • before 17.7.2affected
  • before 18.1.1affected

• Apple macOS

  • before 15.1.1affected

• Apple Safari

  • before 18.1.1affected

• Apple visionOS

  • before 2.1.1affected

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2016-9079A use-after-free vulnerability in SVG Animation has been discovered.KEV
  86Now
• CVE-2024-44308The issue was addressed with improved checks.KEV
  68This week
• CVE-2021-25216A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack
  64This week
• CVE-2016-2098Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Rub
  53Plan
• CVE-2015-1592Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::t
  53Plan
• CVE-2016-2851Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corrupti
  47Plan

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

User content is inserted into the page as HTML. The browser interprets the content as code rather than data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1commentEl.innerHTML = comment.body;

1commentEl.textContent = comment.body;

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.