CVE-2024-23296

ENISA EUVD: EUVD-2024-20815 ↗
Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: March 3, 2026 4 articles
VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
0.29%
probability
This CVE has a 0.29% probability of being exploited in the next 30 days.
0% Top 52.5th percentile of all CVEs 100%

CVSS v3.1

Source: NVD
7.8
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Project Zero
Arbitrary kernel r/w in RTKit

Affected Products

Attack Intelligence

Google Project Zero

Patched
March 6, 2024
Reported by
???
Root Cause Analysis
???

Exploits & PoC

SimoesCTT/lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

Apple Silicon runs at frequencies that are golden ratio harmonics of 587 kHz: · Performance cores: 3.2 GHz = 587 kHz × 5451 (≈ φ⁸ × 1000) · Efficienc

0
1 repo — triés par ⭐ Rechercher sur GitHub ↗

Signal Intelligence

Confidenceⓘ
92%
EPSS 0.29%
CVSS v3.1 7.8
Mentions 4
Last Seen May 13, 2024

CNA Information

Analyst Note

This CVE is confirmed as a zero-day actively exploited in the wild against iOS/iPadOS devices, with Apple acknowledging exploitation and releasing fixes in iOS 17.4. The vulnerability involves memory corruption enabling kernel protection bypass, supported by reports from reputable sources (BleepingComputer, CERT-EU) and inclusion in Google Project Zero, demonstrating high credibility and real-world threat.

Triage Info

Decided atMar 03, 2026