Apple Addresses Critical Zero-Day Vulnerabilities Affecting Intel-Based Macs
Apple has addressed two critical zero-day vulnerabilities that were actively exploited by attackers to target Intel-based Macs. The flaws resided in macOS Sequoia’s JavaScriptCore (CVE-2024-44308) and WebKit (CVE-2024-44309) components.
The more severe vulnerability, identified as CVE-2024-44308, could enable attackers to execute malicious code remotely via specially crafted web content. By contrast, the other flaw (CVE-2024-44309) could be leveraged for cross-site scripting (XSS) attacks.
These patches are included in macOS Sequoia 15.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, and visionOS 2.1.1. Notably, this brings the total number of zero-day vulnerabilities that Apple has patched so far in 2024 to six.
It is crucial for users to update their devices to the latest software versions at the earliest convenience to safeguard themselves from these vulnerabilities. Here’s how to update your Apple device:
- For macOS devices, navigate to System Preferences > Software Update.
- On iPhones and iPads, go to Settings > General > Software Update.
By keeping your software up-to-date, you can ensure that your device is protected against the latest security threats.
Related reading: proactive cybersecurity services, Tech Glitch Grounds Flights and Disrupts Services Worldwide and Amazon Echobud Consumers Should Update Due To Overheating Issue.
Get In Touch
Share On Social Media
Other Recent Blog Articles
Shadow AI in Small Business: How to Find It and Fix It in 2026
Shadow AI is the AI your team already uses without IT knowing: personal ChatGPT accounts, free notetakers, and AI browser extensions. Here is how a Portland-area small business can find it without a witch hunt, give people a safer option, and lock down the risky parts in 30 days.
Restaurant QR Code Scams: How a Fake Menu Sticker Steals Your Card
At a lot of Portland restaurants these days, there’s no paper menu. You get a little QR code on a table tent, you scan it, and you order. It’s convenient,…
Hacked? What Portland CPAs, Financial Advisors, and Medical Offices Must Report After a Data Breach (and the Fines If You Don’t)
If you run a CPA firm, tax practice, financial advisory office, or medical clinic anywhere from Hillsboro to Gresham or Wilsonville to Vancouver, WA, a breach starts several reporting clocks…