← Back to CVE List
CVE-2024-23222NVD
Vulnerability Summary
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.
CVSS v3.1 Base Metrics — Score 8.8 (HIGH)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Apple Safari < 17.3
- Apple Ipados < 15.8.7
- Apple Ipados >= 16.0 and < 16.7.5
- Apple Ipados >= 17.0 and < 17.3
- Apple Iphone Os < 15.8.7
- Apple Iphone Os >= 16.0 and < 16.7.5
- Apple Iphone Os >= 17.0 and < 17.3
- Apple Macos >= 12.0 and < 12.7.3
- Apple Macos >= 13.0 and < 13.6.4
- Apple Macos >= 14.0 and < 14.3
- Apple Tvos < 17.3
- Apple Visionos < 1.0.2
- Apple Safari 17.3
- Apple Ipados 15.8.7
- Apple Ipados 16.7.5
- Apple Ipados 17.3
- Apple Iphone Os 15.8.7
- Apple Iphone Os 16.7.5
- Apple Iphone Os 17.3
- Apple Macos 12.7.3
- Apple Macos 13.6.4
- Apple Macos 14.3
- Apple Tvos 17.3
- Apple Visionos 1.0.2
External References
- https://support.apple.com/en-us/118479
- https://support.apple.com/en-us/120304
- https://support.apple.com/en-us/120305
- https://support.apple.com/en-us/120307
- https://support.apple.com/en-us/120309
- https://support.apple.com/en-us/120310
- https://support.apple.com/en-us/120311
- https://support.apple.com/en-us/120339
- https://support.apple.com/en-us/126632
- http://seclists.org/fulldisclosure/2024/Feb/6
- http://seclists.org/fulldisclosure/2024/Jan/34
- http://seclists.org/fulldisclosure/2024/Jan/40
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/US43EQFC2IS66EA2CPAZFH2RQ6WD7PKF/
- https://support.apple.com/en-us/HT214055
- https://support.apple.com/en-us/HT214059
- https://support.apple.com/en-us/HT214061
- https://support.apple.com/kb/HT214055
- https://support.apple.com/kb/HT214056
- https://support.apple.com/kb/HT214057
- https://support.apple.com/kb/HT214058
- https://support.apple.com/kb/HT214059
- https://support.apple.com/kb/HT214061
- https://support.apple.com/kb/HT214063
- https://support.apple.com/kb/HT214070
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23222