Vulnerability Intelligence Report
Apple Multiple Products Memory Corruption Vulnerability
CVE-2024-23296
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
CISA KEV
SSVC: Active Exploitation
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:1.41%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-787 ↗CWE-787 Out-of-bounds Write
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Apple | iOS and iPadOS | 0 < 16.7.8 (affected), 0 < 17.4 (affected) |
| Apple | macOS | 0 < 12.7.6 (affected), 0 < 13.6.7 (affected), 0 < 14.4 (affected) |
| Apple | tvOS | 0 < 17.4 (affected) |
| Apple | visionOS | 0 < 1.1 (affected) |
| Apple | watchOS | 0 < 10.4 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Apple Inc. · Vendor · USA |
| Reserved | 2024-01-12T22:22:21 |
| Published | 2024-03-05T19:24:13 |
| Last Updated | 2026-04-02T18:25:23 |
Community Chatter & Buzz