CVE-2024-23222

Description

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited.

References

https://medium.com/@elniak/cve-2024-23222-apple-webkits-zero-day-vulnerability-83109de9ddee?source=rss------vulnerability-5

https://medium.com/@elniak/cve-2024-23222-apple-webkits-zero-day-vulnerability-83109de9ddee?source=rss------bug_bounty-5

https://techcrunch.com/2024/01/31/apple-vision-pro-zero-day-security-bug-exploited/

https://www.scmagazine.com/news/apple-patches-zero-day-affecting-operating-systems-for-devices-macs

https://www.hivepro.com/threat-advisory/apple-fixes-first-actively-exploited-zero-day-of-2024/

https://thehackernews.com/2024/01/apple-issues-patch-for-critical-zero.html?&web_view=true

https://www.bleepingcomputer.com/news/apple/apple-fixes-first-zero-day-bug-exploited-in-attacks-this-year/

https://support.apple.com/kb/HT214063

https://support.apple.com/kb/HT214063

https://support.apple.com/kb/HT214061

https://support.apple.com/kb/HT214061

https://support.apple.com/kb/HT214059

https://support.apple.com/kb/HT214058

https://support.apple.com/kb/HT214058

https://support.apple.com/kb/HT214057

https://support.apple.com/kb/HT214057

https://support.apple.com/kb/HT214056

https://support.apple.com/kb/HT214055

https://support.apple.com/en-us/HT214061

https://support.apple.com/en-us/HT214061

https://support.apple.com/en-us/HT214059

https://support.apple.com/en-us/HT214059

https://support.apple.com/en-us/HT214055

https://support.apple.com/en-us/HT214055

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3