CVE-2024-27828: high-severity vulnerability in Apple tvOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A memory handling flaw in Apple operating systems allows malicious apps to run code with the highest system privileges (kernel level). This is critical because it gives attackers complete control over your device.
Out-of-bounds memory access vulnerability (CWE-786, CWE-788) in iOS, iPadOS, tvOS, visionOS, and watchOS allows a malicious app to execute arbitrary code with kernel privileges. The attack requires the app to be installed on the device; the vulnerability is fixed through improved memory bounds checking in the affected OS versions.
In the same product, most dangerous first.