CVE-2024-23225
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 5, 2024
Updated: Dec 20, 2024
CWE ID 787
Summary
CVE-2024-23225 is a memory corruption vulnerability that has been addressed in iOS 16.7.6 and iPadOS 16.7.6, as well as in iOS 17.4 and iPadOS 17.4. If successfully exploited, an attacker with arbitrary kernel read and write capability could bypass kernel memory protections. Apple has acknowledged receipt of a report suggesting that this vulnerability might have already been exploited.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.