CVE-2024-23296—Apple Multiple Products Memory Corruption Vulnerability

Vulnerability Name

Apple Multiple Products Memory Corruption Vulnerability

Description

Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

• https://support.apple.com/en-us/HT214081, https://support.apple.com/en-us/HT214082, https://support.apple.com/en-us/HT214084, https://support.apple.com/en-us/HT214086, https://support.apple.com/en-us/HT214088
• https://nvd.nist.gov/vuln/detail/CVE-2024-23296

Related News Articles

• Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1March 4, 2026
• Apple backports fix for zero-day exploited in attacks to older iPhonesMay 13, 2024

Related Weaknesses

• CWE-787