Apple fixes two actively exploited iOS zero-days (CVE-2024-23225, CVE-2024-23296)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-23225+1 related CVE | Memory Corruption Kernel Protection Bypass in Apple iOS, macOS, tvOS, visionOS | 7.8 | 1% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
Apple has fixed two iOS zero-day vulnerabilities (CVE-2024-23225, CVE-2024-23296) exploited by attackers in the wild. On Tuesday, Apple released security updates for all three supported branches of iOS and iPadOS. Two affecting the privacy of users (allowing an app to read sensitive location information and making users’ locked tabs visible)
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.