CVE-2024-23296—Apple Multiple Products Memory Corruption Vulnerability

漏洞名称

Apple Multiple Products Memory Corruption Vulnerability

描述

Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://support.apple.com/en-us/HT214081, https://support.apple.com/en-us/HT214082, https://support.apple.com/en-us/HT214084, https://support.apple.com/en-us/HT214086, https://support.apple.com/en-us/HT214088
• https://nvd.nist.gov/vuln/detail/CVE-2024-23296

相关新闻文章

• Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1March 4, 2026
• Apple backports fix for zero-day exploited in attacks to older iPhonesMay 13, 2024

相关 CWE

• CWE-787