CVE-2024-23296: high-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A memory protection weakness in Apple's kernel allows attackers with system-level access to bypass safety mechanisms that prevent unauthorized memory manipulation. This could let them take complete control of the device.
A memory corruption vulnerability (CWE-787) in Apple's kernel memory protection mechanisms allows an attacker with arbitrary kernel read/write capabilities to circumvent memory protections and potentially achieve elevated privilege escalation or kernel exploitation. The vulnerability requires pre-existing kernel-level access and has been reported in active exploitation.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.