CVE-2024-44309
Apple Products Cross-Site Scripting Vulnerability
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A cookie management flaw in Apple software may allow cross-site scripting attacks if users encounter specially crafted web content. This could lead to unauthorized access to information or session manipulation. Apple has noted potential active exploitation on some Intel-based Mac systems. Organizations should apply ven