CVE-2024-23296 kev in the critical feed json
A memory corruption issue was addressed with improved validation.
published 2024-03-05 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-20815
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Exploited
- added 2024-03-06
- epss
- 1.4%
- EPSS 1.4% chance of exploitation in 30 days, percentile 72%
- public exploits
- 0
- none known
Summary
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
Patch / fix
cisa required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Apple iOS and iPadOS 16.7.8, 17.4
- Apple macOS 12.7.6, 13.6.7, 14.4
- Apple tvOS 17.4
- Apple visionOS 1.1
- Apple watchOS 10.4
- apple ipad_os 17.4
- apple iphone_os 17.4
Timeline
- Published
- 0-day patched (Project Zero)
- Added to CISA KEV
- CISA SSVC: exploitation active
- CISA patch deadline
Known exploited
- Added
- 2 y ago
- Patch by
- 2024-03-27 (2 y ago)
- Ransomware
- Not known
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Vendor, product
- Apple, Multiple Products
- CISA name
- Apple Multiple Products Memory Corruption Vulnerability
Zero-day
Detected in real attacks while still unknown to the vendor and the public, per Google Project Zero's 0day In-the-Wild tracker.
- Patched
- 2024-03-06
- Details
- project zero tracker
CISA SSVC
- Exploitation
- Active, exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 2 y ago
Exploit prediction
1.41% chance of exploitation in the next 30 days, higher than 72% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Apple iOS and iPadOS
- Apple macOS
- Apple tvOS
- Apple visionOS
- Apple watchOS
- apple ipad_os
- apple iphone_os
Classification
- Weakness
-
- CWE-787 Out-of-bounds Write
References
-
support.apple.com
/en-us/120881
release-notes, vendor-advisory
-
support.apple.com
/en-us/120882
release-notes, vendor-advisory
-
support.apple.com
/en-us/120883
release-notes, vendor-advisory
-
support.apple.com
/en-us/120893
release-notes, vendor-advisory
-
support.apple.com
/en-us/120895
release-notes, vendor-advisory
-
support.apple.com
/en-us/120898
release-notes, vendor-advisory
-
support.apple.com
/en-us/120900
release-notes, vendor-advisory
-
support.apple.com
/en-us/120910
release-notes, vendor-advisory
-
support.apple.com
/en-us/HT214081
vendor-advisory
-
support.apple.com
/kb/HT214088
vendor-advisory
-
support.apple.com
/kb/HT214084
vendor-advisory
-
support.apple.com
/kb/HT214086
vendor-advisory
-
support.apple.com
/kb/HT214087
vendor-advisory
-
support.apple.com
/kb/HT214107
vendor-advisory
-
support.apple.com
/kb/HT214100
vendor-advisory
-
support.apple.com
/kb/HT214118
vendor-advisory
-
support.apple.com
/kb/HT214081
vendor-advisory
-
cisa.gov
/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23296
government-resource, us-government-resource
-
seclists.org
/fulldisclosure/2024/Mar/18
mailing-list, third-party-advisory
-
seclists.org
/fulldisclosure/2024/Mar/21
mailing-list, third-party-advisory
-
seclists.org
/fulldisclosure/2024/Mar/25
mailing-list, third-party-advisory
-
seclists.org
/fulldisclosure/2024/Mar/24
mailing-list, third-party-advisory
-
seclists.org
/fulldisclosure/2024/Mar/26
mailing-list, third-party-advisory
-
seclists.org
/fulldisclosure/2024/May/11
mailing-list, third-party-advisory
-
seclists.org
/fulldisclosure/2024/May/13
mailing-list, third-party-advisory
-
seclists.org
/fulldisclosure/2024/Jul/20
mailing-list, third-party-advisory
Sources
- CVE List CVE-2024-23296
- NVD CVE-2024-23296
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.