Apple Addresses Critical Zero-Day Vulnerabilities Affecting Intel-Based Macs

By , Owner, PDX Information Technology Services

Last updated:

Apple has addressed two critical zero-day vulnerabilities that were actively exploited by attackers to target Intel-based Macs. The flaws resided in macOS Sequoia’s JavaScriptCore (CVE-2024-44308) and WebKit (CVE-2024-44309) components.

The more severe vulnerability, identified as CVE-2024-44308, could enable attackers to execute malicious code remotely via specially crafted web content. By contrast, the other flaw (CVE-2024-44309) could be leveraged for cross-site scripting (XSS) attacks.

These patches are included in macOS Sequoia 15.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, and visionOS 2.1.1. Notably, this brings the total number of zero-day vulnerabilities that Apple has patched so far in 2024 to six.

It is crucial for users to update their devices to the latest software versions at the earliest convenience to safeguard themselves from these vulnerabilities. Here’s how to update your Apple device:

  • For macOS devices, navigate to System Preferences > Software Update.
  • On iPhones and iPads, go to Settings > General > Software Update.

By keeping your software up-to-date, you can ensure that your device is protected against the latest security threats.

Related reading: proactive cybersecurity services, Tech Glitch Grounds Flights and Disrupts Services Worldwide and Amazon Echobud Consumers Should Update Due To Overheating Issue.

Request an IT assessment

Tell us a little about your business and a PDX IT team member will follow up to schedule an assessment. Prefer to talk? Call 971-331-4871.

  • This field is for validation purposes and should be left unchanged.
  • No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties
Steve Shaff, owner of PDX Information Technology Services

About the author: Steve Shaff

Steve Shaff is the owner of PDX Information Technology Services, a managed IT provider he founded in 2020. From the Tualatin office he helps businesses across Portland Metro & Southwest Washington with IT support, cybersecurity and compliance. More about Steve ยท Contact PDX IT

Get In Touch
Contact Us
Share On Social Media
Other Recent Blog Articles
Employee Offboarding IT Checklist for Portland Small Businesses: What to Lock Down the Day Someone Leaves
November 4, 2026

Portland employee offboarding IT checklist: lock Microsoft 365, save the mailbox and OneDrive files, change shared passwords and wipe company devices.

Holiday Phishing Scams 2026: Fake Shipping Notices, Gift Card Requests and Delivery Texts
November 3, 2026

Holiday phishing scams are hitting Portland small businesses: fake shipping notices, gift card requests from the boss and delivery texts. How to stop them.

“We Have Cybersecurity” Is No Longer Enough: Regulators and Insurers Now Want Proof
November 2, 2026

Cybersecurity compliance proof: HIPAA, CMMC, the FTC and cyber insurers now want documented evidence, not promises. See the checklist for 2027.