Firetruck

CVE-2024-23296

KEV
Updated Apr 2, 2026 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= 0, < 16.7.8affected
iOS and iPadOSApple / iOS and iPadOS>= 0, < 17.4affected
ipad_osapple / ipad_os>= 0, < 17.4affected
iphone_osapple / iphone_os>= 0, < 17.4affected
macosapple / macos>= 14.0, < 14.4affected
macOSApple / macOS>= 0, < 14.4affected
macOSApple / macOS>= 0, < 13.6.7affected
macOSApple / macOS>= 0, < 12.7.6affected
tvosapple / tvos>= 0, < 17.4affected
tvOSApple / tvOS>= 0, < 17.4affected
visionosapple / visionos>= 0, < 1.1affected
visionOSApple / visionOS>= 0, < 1.1affected
watchosapple / watchos>= 0, < 10.4affected
watchOSApple / watchOS>= 0, < 10.4affected