高危
Apple多款产品visionOS内核内存损坏漏洞
2024-03-05 19:24:12 公开 ，2026-04-02 19:21:23 更新
- CISA KEV
- 关键漏洞
- 本地
- 无需认证
- CWE Top 25 (2023)
- CWE Top 25 (2024)
- 公开PoC
- CWEs：
- CWE-787 （Out-of-bounds Write）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2024-08-28 21:58:10
风险信息
- CVSS v3 向量
- AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS v3 风险值
- 5.5
- CVSS v3.1 向量
- AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 7.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Apple iOS、iPadOS、macOS、tvOS、watchOS和visionOS内核包含内存损坏漏洞，使具有任意内核读写功能的攻击者能够绕过内核内存保护。
- 修复建议
- APPLE已发布修复程序。有关修补程序、升级或建议的解决方法信息，请参如下链接： https://support.apple.com/en-us/HT214081 https://support.apple.com/en-us/HT214082 https://support.apple.com/en-us/HT214083 https://support.apple.com/en-us/HT214084 https://support.apple.com/en-us/HT214085 https://support.apple.com/en-us/HT214086 https://support.apple.com/en-us/HT214087 https://support.apple.com/en-us/HT214088
参考链接
- https://support.apple.com/en-us/HT214081
CVE · Vendor Advisory
- https://support.apple.com/en-us/HT214082
CVE · Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-23225
- https://github.com/advisories/GHSA-7r4v-4jv2-pj5p
- https://support.apple.com/kb/HT214083
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214087
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214088
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214084
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214085
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214086
CVE · Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Mar/19
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/21
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/18
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/22
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/24
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/26
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/23
CVE · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/25
CVE · Mailing List · Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23225
NVD · US Government Resource
- https://support.apple.com/kb/HT214082
NVD · Vendor Advisory
- https://support.apple.com/en-us/120884
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120886
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120881
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120893
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120895
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120882
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120880
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120883
CVE · Vendor Advisory · Release Notes