2024-013: Zero-Day Vulnerability in Apple Products

2024-013: Zero-Day Vulnerability in Apple Products ↗ source

January 24, 2024 CERT-EU Advisory

Source: https://cert.europa.eu/publications/security-advisories/2024-013/

Summary

This vulnerability affects iOS, iPadOS, macOS and tvOS devices and is currently being exploited in the wild [2]. The updates also contain fixes for other vulnerabilities It is recommended updating as soon as possible. The vulnerability CVE-2024-23222 exists in the WebKit browser engine, and is due to a type confusion. It could allow attackers to execute arbitrary code on an affected device after opening a maliciously crafted web page. CERT-EU strongly recommends updating affected devices as soon as possible.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVE	CVSS	Affected
CVE-2024-23222	8.8 High	Apple Multiple Products Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously cra…

Extracted from the publication text. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Apple 94 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.