CVE-2024-23225

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Mar 5, 2024
Updated: Aug 14, 2024
CWE ID 787

Summary

CVE-2024-23225 is a memory corruption issue that has been resolved in iOS 16.7.6 and iPadOS 16.7.6, as well as in iOS 17.4 and iPadOS 17.4. This vulnerability enables an attacker with arbitrary kernel read and write capability to potentially bypass kernel memory protections. Apple has acknowledged receiving a report indicating that this issue might have already been exploited.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share