REDHAT-BUG-2353872
First published: Thu Mar 20 2025(Updated: )
A cookie management issue was addressed with improved state management. This issue is fixed in watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18 and iPadOS 18, tvOS 18. A malicious website may exfiltrate data cross-origin.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS, iPadOS, and watchOS | <11 | |
| macOS | <15 | |
| Safari | <18 | |
| visionOS | <2 | |
| Apple iOS and iPadOS | <18 | |
| Apple iOS, iPadOS, and macOS | <18 | |
| tvOS | <18 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-2353872?
The severity of REDHAT-BUG-2353872 is classified as high due to the potential for data exfiltration across origins.
How do I fix REDHAT-BUG-2353872?
To fix REDHAT-BUG-2353872, update to the latest versions of watchOS 11, macOS Sequoia 15, Safari 18, visionOS 2, iOS 18, iPadOS 18, or tvOS 18.
What products are affected by REDHAT-BUG-2353872?
Products affected by REDHAT-BUG-2353872 include watchOS, macOS Sequoia, Safari, visionOS, iOS, iPadOS, and tvOS.
What kind of attack does REDHAT-BUG-2353872 enable?
REDHAT-BUG-2353872 enables a cross-origin data exfiltration attack through improper cookie management.
Is there a workaround for REDHAT-BUG-2353872?
There currently is no documented workaround for REDHAT-BUG-2353872; updating to fixed versions is the recommended action.
- agent/severity
- agent/source
- agent/last-modified-date
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/tags
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-54467
- vendor/apple
- canonical/apple ios, ipados, and watchos
- canonical/macos
- canonical/safari
- canonical/visionos
- canonical/apple ios and ipados
- canonical/apple ios, ipados, and macos
- canonical/tvos