CVE-2024-54467
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 10, 2025
Updated: Mar 14, 2025
CWE ID 200
Summary
CVE-2024-54467 is a recently identified cookie management vulnerability. Affected systems include watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18, and iPadOS 18, as well as tvOS 18. The issue stems from improper state management in the handling of cookies, allowing a malicious website to exfiltrate data cross-origin. This security flaw poses a significant risk, as it can lead to unintended data disclosure. Users are advised to update their affected systems to the latest versions to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.