CVE-2024-23296

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
appleCNA
---
---
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
VendorProductVersion
appleipad_os
𝑥
< 16.7.8
appleipad_os
17.0 ≤
𝑥
< 17.4
appleiphone_os
𝑥
< 16.7.8
appleiphone_os
17.0 ≤
𝑥
< 17.4
applemacos
12.0 ≤
𝑥
< 12.7.6
applemacos
13.0 ≤
𝑥
< 13.6.7
applemacos
14.0 ≤
𝑥
< 14.4
appletvos
𝑥
< 17.4
applevisionos
𝑥
< 1.1
applewatchos
𝑥
< 10.4
𝑥
= Vulnerable software versions