medium6.5
CVE-2024-54467
A cookie management issue was addressed with improved state management.
Impact
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. A malicious website may exfiltrate data cross-origin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | before 18.0 |
| Apple | Ipados | before 18.0 |
| Apple | Iphone Os | before 18.0 |
| Apple | Macos | before 15.0 |
| Apple | Tvos | before 18.0 |
| Apple | Watchos | before 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/121238
- https://support.apple.com/en-us/121240
- https://support.apple.com/en-us/121241
- https://support.apple.com/en-us/121248
- https://support.apple.com/en-us/121249
- https://support.apple.com/en-us/121250
- https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html