CVE-2024-54540 - The issue was addressed with improved input sanitization

Back Back to CVE browser

MEDIUM

The issue was addressed with improved input sanitization

Published Jan 15, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.21%

Description

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.

Affected products

Vendor Apple Product Apple Music Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <1.5.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

Apple Music

n/a

Version	Status	Constraints
0	affected	<1.5.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-52634
Advisory
https://support.apple.com/en-us/122043
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-52634		Advisory
https://support.apple.com/en-us/122043		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Jan 15, 2025

Updated May 21, 2026

Reserved Dec 3, 2024

Link CVE-2024-54540

CISA Vulnrichment

Updated Jan 16, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-54540

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-54540

ENISA EUVD

Assigner apple

Published Jan 15, 2025

Updated May 21, 2026

Exploited since n/a

Link EUVD-2024-52634

EUVD-2024-52634