CVE-2024-23225Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

7.8 HIGHEPSS 1.48%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Last updated: 2026-06-17 07:12 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
7.8	HIGH	3.1NVD	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA required action

⚡ Known exploited · remediation due Mar 27, 2024

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Details

CVE ID: CVE-2024-23225
Status: Analyzed
Assigner (CNA): apple
Published: Mar 5, 2024
Last modified: 2026-06-17 07:12 UTC
Weaknesses: CWE-787

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 13:35 UTC.