CVE-2024-23225highunder attackCWE-787

CVE-2024-23225: high-severity vulnerability in Apple macOS

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

51Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.8epss 1.5%
from disclosure to weapon
Published on NVDMar 5
CISA KEV+1d
Action required by CISAfederal deadline: 2024-03-27

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

A memory corruption flaw in Apple's operating systems allows an attacker with kernel-level access to bypass security protections that defend the core of the system. This is serious because it could enable further attacks that compromise the entire device.

Technical detail

This out-of-bounds write vulnerability (CWE-787) requires an attacker to already possess arbitrary kernel read/write capabilities. Successful exploitation permits circumvention of kernel memory protections (such as SMEP/SMAP), potentially enabling privilege escalation or further code execution with elevated privileges. Apple confirmed active exploitation in the wild.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H