CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Apple iOS, macOS, watchOS Kernel Memory Protection Bypass Vulnerability (CVE-2024-23225) Urgent Security Advisory
[Affected Scope] Apple devices running iOS/iPadOS prior to 16.7.6 or 17.4, macOS Monterey prior to 12.7.4, Ventura prior to 13.6.5, Sonoma prior to 14.4, watchOS prior to 10.4, tvOS prior to 17.4, and visionOS prior to 1.1
[Impact] A local attacker with arbitrary kernel read and write capabilities can bypass kernel memory protections, leading to complete system compromise. Active exploitation in the wild has been reported
[Mitigation] Immediately update all affected Apple devices to the latest patched versions (e.g., iOS 17.4, macOS Sonoma 14.4)
Apple iOS, iPadOS, and macOS Pointer Authentication (PAC) Bypass Vulnerability (CVE-2022-48618, CISA KEV)
[Affected Scope] Apple operating systems prior to iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2, and tvOS 16.2
[Impact] A local attacker with arbitrary read and write capabilities can bypass Pointer Authentication (PAC) to achieve full kernel-level code execution
[Mitigation] Immediately update affected devices to iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, or later versions