CVE-2024-23296

Severity

HIGH

CVSS

7.8

EPSS

0.01411

Risk score

56.69

CISA KEV

Yes

PoC

Published

2024-03-06

Modified

2024-03-06

First seen

2026-08-07

Aliases

EUVD-2024-20815, GHSA-V4RC-HQ4F-4CMP

Products

Apple:Multiple Products, Apple:iOS and iPadOS 0 <16.7.8, Apple:iOS and iPadOS 0 <17.4, Apple:macOS 0 <12.7.6, Apple:macOS 0 <13.6.7, Apple:macOS 0 <14.4, Apple:tvOS 0 <17.4, Apple:visionOS 0 <1.1, Apple:watchOS 0 <10.4

Sources

euvd EUVD-2024-20815
cisa.gov CVE-2024-23296

Description

Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.

References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2024-23296
https://support.apple.com/en-us/HT214081
https://support.apple.com/en-us/HT214082
https://support.apple.com/en-us/HT214084
https://support.apple.com/en-us/HT214086
https://support.apple.com/en-us/HT214088
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-20815
https://support.apple.com/en-us/120881
https://support.apple.com/en-us/120882
https://support.apple.com/en-us/120883
https://support.apple.com/en-us/120893
https://support.apple.com/en-us/120895
https://support.apple.com/en-us/120898
https://support.apple.com/en-us/120900
https://support.apple.com/en-us/120910