Apple backports fix for RTKit iOS zero-day to older iPhones
ID: db4a82fa-0d50-5f63-aacb-ef38dd680804
STIX ID: report--db4a82fa-0d50-5f63-aacb-ef38dd680804
Feed Name: Bleeping Computer
Threat Score
Apple has backported March security updates to older iPhone, iPad, and macOS Ventura devices to fix a memory-corruption zero-day (CVE-2024-23296) in the RTKit component that can allow arbitrary kernel read/write and bypass protections; Apple says the flaw "may have been actively exploited" but has not attributed discovery or detailed the attacks, and users of affected legacy devices are strongly advised to install the updates immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.