CVE-2024-27840: high-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in memory handling allows an attacker who already has control of the kernel to bypass protections that prevent unauthorized access to kernel memory. This matters because it removes a critical security barrier designed to isolate the operating system from being further compromised.
CWE-786 memory handling vulnerability affecting Apple's kernel. Attack requires prior kernel code execution; allows bypass of kernel memory protections through memory handling defects. Mitigated through improved memory handling across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS platforms.
In the same product, most dangerous first.