{"metadata": {"vulnerability": "CVE-2024-44133", "count": 45, "kinds": {"milestone": 8, "sighting": 17, "kev": 0, "other": 20}}, "data": [{"timestamp": "2024-08-20T21:42:05.919Z", "date_only": false, "value": "2024-08-20T21:42:05.919Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-44133", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": true, "value": "2024-09-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0785", "record": "CERTFR-2024-AVI-0785", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-09-16T22:00:00Z", "date_only": false, "value": "2024-09-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2154", "record": "WID-SEC-W-2024-2154", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-16T22:00:00Z", "date_only": false, "value": "2024-09-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2154", "record": "WID-SEC-W-2024-2154", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-16T22:00:00Z", "date_only": false, "value": "2024-09-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2154", "record": "WID-SEC-W-2024-2154", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-09-16T23:23:11.932Z", "date_only": false, "value": "2024-09-16T23:23:11.932Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-44133", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-09-17T00:00:00Z", "date_only": false, "value": "2024-09-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0785", "record": "CERTFR-2024-AVI-0785", "field": "last_revision_date"}, {"timestamp": "2024-09-17T00:00:00Z", "date_only": false, "value": "2024-09-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0785", "record": "CERTFR-2024-AVI-0785", "field": "initial_release_date"}, {"timestamp": "2024-09-17T00:00:00Z", "date_only": false, "value": "2024-09-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0785", "record": "CERTFR-2024-AVI-0785", "field": "revisions.0.revision_date"}, {"timestamp": "2024-09-17T00:15:50Z", "date_only": false, "value": "2024-09-17T00:15:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JPF3-J9X5-W3FF", "record": "GHSA-JPF3-J9X5-W3FF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-09-17T00:15:50.300Z", "date_only": false, "value": "2024-09-17T00:15:50.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-44133", "record": "FKIE_CVE-2024-44133", "field": "published"}, {"timestamp": "2024-09-17T00:31:05Z", "date_only": false, "value": "2024-09-17T00:31:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JPF3-J9X5-W3FF", "record": "GHSA-JPF3-J9X5-W3FF", "field": "published"}, {"timestamp": "2024-09-17T19:25:04.060Z", "date_only": false, "value": "2024-09-17T19:25:04.060403Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-44133", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-17T19:25:04.060Z", "date_only": false, "value": "2024-09-17T19:25:04.060403Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-44133", "record": "FKIE_CVE-2024-44133", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-26T08:48:34.451Z", "date_only": false, "value": "2024-09-26T08:48:34.451990Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0381", "record": "NCSC-2024-0381", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-26T08:48:34.451Z", "date_only": false, "value": "2024-09-26T08:48:34.451990Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0381", "record": "NCSC-2024-0381", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-26T08:48:34.451Z", "date_only": false, "value": "2024-09-26T08:48:34.451990Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0381", "record": "NCSC-2024-0381", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-18T07:52:33Z", "date_only": false, "value": "2024-10-18T07:52:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/5753", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "7f4db1d9-0787-400d-a9d9-17879a9d34a0", "content": "\ud83d\uded1 Microsoft discovered a serious security flaw (CVE-2024-44133) in #Apple\u2019s macOS TCC framework that could bypass user consent for sensitive data access like your location, camera, or microphone! \n \nLearn more: https://thehackernews.com/2024/10/microsoft-reveals-macos-vulnerability.html", "url": "https://t.me/thehackernews/5753"}, {"timestamp": "2024-10-18T09:59:16Z", "date_only": false, "value": "2024-10-18T09:59:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/gwe6mmQ6GGmRb5OaewKpJ32MUJHsZ156vCOs3qTVIkLTPA", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "d4821923-1eb4-409f-8ba1-11c767ab5205"}, {"timestamp": "2024-10-18T10:34:14Z", "date_only": false, "value": "2024-10-18T10:34:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/2736", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "506e267f-3052-47e0-a788-3a9e5519f3ff", "content": "Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser\nhttps://thehackernews.com/2024/10/microsoft-reveals-macos-vulnerability.html\n\nMicrosoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control (TCC) framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data.\nThe shortcoming, codenamed HM Surf by the tech giant, is tracked as CVE-2024-44133. It was addressed by Apple as part of macOS Sequoia 15 by removing the", "url": "https://t.me/KomunitiSiber/2736"}, {"timestamp": "2024-10-18T11:28:34Z", "date_only": false, "value": "2024-10-18T11:28:34.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fDixqZudfjq4lNxkSsV7qFa8eCouEhRYwyrDDbEagizz1w", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "4cd041c3-2cbf-43f7-80b2-51c74f202129"}, {"timestamp": "2024-10-18T12:29:09.241Z", "date_only": false, "value": "2024-10-18T12:29:09.241460Z", "kind": "sighting", "label": "Seen", "source": "Source not specified", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "9f9767fc-a284-4f26-9d81-2540cf7b0637"}, {"timestamp": "2024-10-18T15:40:05Z", "date_only": false, "value": "2024-10-18T15:40:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6336", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "9dd96d19-3600-4aeb-a450-2b0bb74ebcba", "content": "Microsoft \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c macOS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u041d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 Mac \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f TCC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u0438\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u043e\u0432, \u043a\u0430\u043c\u0435\u0440\u0430, \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d \u0438 \u0442\u0434., \u0431\u0435\u0437 \u0438\u0445 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Microsoft Threat Intelligence \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043e\u0431\u0445\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043d\u0438\u043c\u0430\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 TCC \u0434\u043b\u044f \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Safari.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 HM Surf, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-44133. \n\n\u041e\u043d \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0431\u044b\u043b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d Apple \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 macOS Sequoia 15 \u043f\u0443\u0442\u0435\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Microsoft \u0443\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 Adload, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e\u043c \u0443\u0433\u0440\u043e\u0437 macOS, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u041e\u0431\u044b\u0447\u043d\u043e \u043b\u044e\u0431\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0430 macOS \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e Safari \u043c\u043e\u0436\u0435\u0442 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u0435, \u043a\u0430\u043c\u0435\u0440\u0435, \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \u0438 \u043c\u043d\u043e\u0433\u043e\u043c\u0443 \u0434\u0440\u0443\u0433\u043e\u043c\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f com.apple.private.tcc.allow.\n\n\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Safari \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u0442 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u043a\u043d\u043e \u043f\u0440\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044d\u0442\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 TCC \u0434\u043b\u044f \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Safari, \u0438\u0437\u043c\u0435\u043d\u0438\u0432 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0437\u0430\u0442\u0435\u043c \u043e\u0442\u043a\u0440\u043e\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u043a\u0430\u043c\u0435\u0440\u044b \u0438\u043b\u0438 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u043d\u043e, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c Safari \u0432 \u043e\u0447\u0435\u043d\u044c \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u043e\u043c \u043e\u043a\u043d\u0435, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u0438 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 Adload \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 macOS, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0445\u043e\u0434\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0443 \u0438 \u043a\u0430\u043c\u0435\u0440\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432.\n\n\u041f\u0440\u0430\u0432\u0434\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043b\u0438 \u0432 \u044d\u0442\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Apple \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043e\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 \u043a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.", "url": "https://t.me/true_secator/6336"}, {"timestamp": "2024-10-19T10:57:50Z", "date_only": false, "value": "2024-10-19T10:57:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/4770", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "7f214dbf-52ac-4af6-87e6-54c8c3cb00d4", "content": "#exploit\n1. CVE-2024-44133:\nPrivacy Controls Bypasses in Safari (+ \"HM-Surf\" evaluator)\nhttps://github.com/yo-yo-yo-jbo/hm-surf\n\n2. CVE-2024-27983:\nHTTP2 Node.js server DoS\nhttps://github.com/lirantal/CVE-2024-27983-nodejs-http2", "url": "https://t.me/Rootsec_2/4770"}, {"timestamp": "2024-10-19T14:36:09Z", "date_only": false, "value": "2024-10-19T14:36:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3336", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "b96079e6-a07d-49e8-a970-0b5694fc3536", "content": "https://github.com/yo-yo-yo-jbo/hm-surf\n\nEvaluates susceptibility to CVE-2024-44133 of common macOS browsers.\n#github #exploit", "url": "https://t.me/CNArsenal/3336"}, {"timestamp": "2024-10-19T15:26:15Z", "date_only": false, "value": "2024-10-19T15:26:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/560", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "18c32497-0524-4835-a03c-fae85e0688f3", "content": "#exploit\n1. CVE-2024-44133:\nPrivacy Controls Bypasses in Safari (+ \"HM-Surf\" evaluator)\nhttps://github.com/yo-yo-yo-jbo/hm-surf\n\n2. CVE-2024-27983:\nHTTP2 Node.js server DoS\nhttps://github.com/lirantal/CVE-2024-27983-nodejs-http2", "url": "https://t.me/HackerArsenal/560"}, {"timestamp": "2024-10-21T18:35:50Z", "date_only": false, "value": "2024-10-21T18:35:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/16575", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "2e46d7e0-6544-4d98-9e67-adc9544d901d", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Microsoft \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Microsoft \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-44133 \u0432 macOS \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u041f\u041e, \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u0442\u0430\u043a\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\nhttps://xakep.ru/2024/10/21/cve-2024-44133/", "url": "https://t.me/xakep_ru/16575"}, {"timestamp": "2024-10-23T08:48:46Z", "date_only": false, "value": "2024-10-23T08:48:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ViralCyber/7255", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "eec3f0d2-68c3-4469-94fd-e2dd08e67670", "content": "\ud83d\udd34 \u0647\u0634\u062f\u0627\u0631 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0628\u0647 \u0627\u067e\u0644: \u062e\u0637\u0631 \u0627\u0641\u0634\u0627\u06cc \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0628\u0627 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 macOS\n\n\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc macOS \u0631\u0627 \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627 \u0642\u0627\u062f\u0631 \u0628\u0647\u200c\u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0645\u062d\u0627\u0641\u0638\u062a\u200c\u0634\u062f\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u06a9\u0646\u062f \u0648 \u0646\u0633\u0628\u062a \u0628\u0647 \u0627\u062d\u062a\u0645\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0646\u060c \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\u200c\n\u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \"HM Surf\" \u0646\u0627\u0645 \u062f\u0627\u0631\u062f\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0641\u0646\u0627\u0648\u0631\u06cc \u0634\u0641\u0627\u0641\u06cc\u062a\u060c \u0631\u0636\u0627\u06cc\u062a \u0648 \u06a9\u0646\u062a\u0631\u0644 (TCC) \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u06a9\u0627\u0631\u0628\u0631\u060c \u0627\u0632\u200c\u062c\u0645\u0644\u0647 \u0635\u0641\u062d\u0627\u062a \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0645\u0631\u0648\u0631\u06af\u0631 \u0648 \u062f\u0648\u0631\u0628\u06cc\u0646\u060c \u0645\u06cc\u06a9\u0631\u0648\u0641\u0648\u0646 \u0648 \u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\u200c\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 CVE-2024-44133 \u0648 \u0628\u0627 \u062f\u0631\u062c\u0647\u200c\u0628\u0646\u062f\u06cc \u0634\u062f\u062a \u0645\u062a\u0648\u0633\u0637 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.\n\u200c\n\u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 macOS \u062e\u0648\u0627\u0633\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0627\u0633\u0631\u0639 \u0648\u0642\u062a \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u0646\u062f \u0648 \u062f\u0631 \u0647\u0645\u06cc\u0646 \u062d\u0627\u0644 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0628\u0627\u0644\u0642\u0648\u0647 \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 Adload \u06a9\u0647 \u06cc\u06a9 \u062e\u0627\u0646\u0648\u0627\u062f\u0647 \u0631\u0627\u06cc\u062c \u0628\u062f\u0627\u0641\u0632\u0627\u0631 macOS \u0627\u0633\u062a \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n#Cybersecurity #Cyber_Attack #macOS #Vulnerability #Apple #Microsoft #HM_Surf #TCC #Malware #Adload #Safari #\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u062d\u0645\u0644\u0647_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0627\u067e\u0644 #\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a #\u0628\u062f\u0627\u0641\u0632\u0627\u0631 #\u0633\u0627\u0641\u0627\u0631\u06cc\n\n\u0645\u0637\u0627\u0644\u0639\u0647 \u06a9\u0627\u0645\u0644 \u062e\u0628\u0631 \ud83d\udc49\n\n\ud83c\udd94 @Takianco\n\ud83c\uddee\ud83c\uddf7", "url": "https://t.me/ViralCyber/7255"}, {"timestamp": "2024-10-25T19:30:02Z", "date_only": false, "value": "2024-10-25T19:30:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11305", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "ba0631ee-11e1-49aa-90e3-6f9be8c7e982", "content": "#exploit\n1. CVE-2024-44133:\nPrivacy Controls Bypasses in Safari (+ \"HM-Surf\" evaluator)\nhttps://github.com/yo-yo-yo-jbo/hm-surf\n\n2. CVE-2024-9264:\nGrafana Post-Auth DuckDB SQLI (File Read)\nhttps://github.com/nollium/CVE-2024-9264\n\n3. CVE-2024-27983:\nHTTP2 Node.js server DoS\nhttps://github.com/lirantal/CVE-2024-27983-nodejs-http2", "url": "https://t.me/CyberSecurityTechnologies/11305"}, {"timestamp": "2024-10-26T13:55:32Z", "date_only": false, "value": "2024-10-26T13:55:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/god_of_server/7", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "7686a0b7-22a7-42cc-b31c-b3e6f404f76c", "content": "#exploit\n1. CVE-2024-44133:\nPrivacy Controls Bypasses in Safari (+ \"HM-Surf\" evaluator)\nhttps://github.com/yo-yo-yo-jbo/hm-surf\n\n2. CVE-2024-9264:\nGrafana Post-Auth DuckDB SQLI (File Read)\nhttps://github.com/nollium/CVE-2024-9264\n\n3. CVE-2024-27983:\nHTTP2 Node.js server DoS\nhttps://github.com/lirantal/CVE-2024-27983-nodejs-http2\n\n\n\ud83d\udd23\ud83d\udd23", "url": "https://t.me/god_of_server/7"}, {"timestamp": "2024-10-28T23:00:00Z", "date_only": false, "value": "2024-10-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2154", "record": "WID-SEC-W-2024-2154", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-02-05T23:00:00Z", "date_only": false, "value": "2025-02-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2154", "record": "WID-SEC-W-2024-2154", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-03-11T23:00:00Z", "date_only": false, "value": "2025-03-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2154", "record": "WID-SEC-W-2024-2154", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-03-11T23:00:00Z", "date_only": false, "value": "2025-03-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2154", "record": "WID-SEC-W-2024-2154", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-12T09:22:54.279Z", "date_only": false, "value": "2025-03-12T09:22:54.279+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-2154", "record": "WID-SEC-W-2024-2154", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-25T16:30:44.862Z", "date_only": false, "value": "2025-03-25T16:30:44.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-44133", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-01T18:11:57Z", "date_only": false, "value": "2025-10-01T18:11:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "829dc70d-c597-4e85-8164-9b64671b2d46"}, {"timestamp": "2025-10-08T21:59:31Z", "date_only": false, "value": "2025-10-08T21:59:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "b8b5a92c-095f-4d1e-aebe-a695393b21fc"}, {"timestamp": "2025-11-04T16:14:00.717Z", "date_only": false, "value": "2025-11-04T16:14:00.717Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-44133", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T18:31:21Z", "date_only": false, "value": "2025-11-04T18:31:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JPF3-J9X5-W3FF", "record": "GHSA-JPF3-J9X5-W3FF", "field": "modified"}, {"timestamp": "2026-04-02T18:23:21.682Z", "date_only": false, "value": "2026-04-02T18:23:21.682Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-44133", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-02T18:23:21.682Z", "date_only": false, "value": "2026-04-02T18:23:21.682Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2024-44133", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:52:22.290Z", "date_only": false, "value": "2026-06-17T07:52:22.290", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-44133", "record": "FKIE_CVE-2024-44133", "field": "lastModified"}, {"timestamp": "2026-07-26T02:00:17.352Z", "date_only": false, "value": "2026-07-26T02:00:17.352049Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/577", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "4e830027-be38-4124-8cf1-ff0551af33aa", "url": "https://t.me/cyberwarehouse/577"}, {"timestamp": "2026-07-27T00:00:25.857Z", "date_only": false, "value": "2026-07-27T00:00:25.857627Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/577", "record": "CVE-2024-44133", "field": "creation_timestamp", "uuid": "b288d277-aed6-4aa2-85d4-3649e0106de4", "url": "https://t.me/cyberwarehouse/577"}]}