VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 12, 2024· Updated Apr 2, 2026

CVE-2024-54479

CVE-2024-54479

Description

The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

CVE-2024-54479 is a denial-of-service vulnerability in Apple WebKit that allows a crash via malicious web content, fixed in recent OS updates.

Background

CVE-2024-54479 is a vulnerability in Apple's WebKit engine that can be triggered by processing maliciously crafted web content, leading to an unexpected process crash. The issue was addressed with improved checks. [1][2][3][4]

Exploitation

An attacker could exploit this vulnerability by convincing a user to view a specially crafted web page, potentially via email, a malicious link, or other web-based attack vectors. No authentication is required, only user interaction.

Impact

Successful exploitation would cause the web content process to crash, resulting in a denial of service. The vulnerability does not appear to allow arbitrary code execution, but disruption of service is possible.

Mitigation

Apple has released patches for this issue in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, and watchOS 11.2. Users should update their devices to the latest available versions. [1][2][3][4]

References
  1. About the security content of macOS Sequoia 15.2 - Apple Support
  2. About the security content of iOS18.2 and iPadOS18.2 - Apple Support
  3. About the security content of watchOS11.2 - Apple Support
  4. About the security content of tvOS18.2 - Apple Support

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

53

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

12

News mentions

0

No linked articles in our index yet.