VULNERABILITY INTELLIGENCE

CVE-2024-23296

CVSS score7.8 HIGH
EPSS probability1.41%
CISA KEVKnown exploited vulnerability
Published2024-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Apple Multiple Products Memory Corruption Vulnerability

Vendor / product: Apple / Multiple Products

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-787

Primary references