CVE-2024-23225: high-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A memory corruption flaw in Apple's operating systems allows an attacker with kernel-level access to bypass security protections that defend the core of the system. This is serious because it could enable further attacks that compromise the entire device.
This out-of-bounds write vulnerability (CWE-787) requires an attacker to already possess arbitrary kernel read/write capabilities. Successful exploitation permits circumvention of kernel memory protections (such as SMEP/SMAP), potentially enabling privilege escalation or further code execution with elevated privileges. Apple confirmed active exploitation in the wild.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.