Arbitrary Code Execution Vulnerability in Apple Products
CVE-2024-27859
8.8HIGH
What is CVE-2024-27859?
An arbitrary code execution vulnerability has been identified in multiple Apple products due to inadequate memory handling. Successful exploitation of this vulnerability occurs when processing specially crafted web content, potentially allowing an attacker to execute arbitrary code on the affected device. Apple has addressed this issue in the latest updates for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS, enhancing memory management to mitigate the risk.
Affected Version(s)
iOS and iPadOS < 17.4
macOS < 14.4
tvOS < 17.4