CVE-2024-23225

Apple's iOS/macOS kernels contain a memory corruption vulnerability allowing arbitrary kernel read/write access, enabling attackers to bypass kernel protections.

This vulnerability allows attackers to bypass kernel memory protections on Apple devices running iOS, iPadOS, macOS, tvOS, watchOS, and visionOS, potentially leading to remote code execution. DIB organizations must ensure all Apple hardware is patched immediately to prevent unauthorized access to sensitive data and maintain NIST 800-171 compliance.

Shame score — A high-severity memory corruption vulnerability in widely used Apple products that allows arbitrary kernel read/write access, posing significant risk to DIB organizations relying on Apple hardware for security controls.