New Apple Zero-Day in WebKit Received a Fix (CVE-2024-23222)

Apple has issued security updates to address the first 2024 zero-day vulnerability affecting its products. The vulnerability, CVE-2024-23222 (CVSS: 7.5), is defined as a type confusion flaw in WebKit, Apple’s web browser engine.

According to Apple’s security advisory, the vulnerability could allow attackers to execute arbitrary code while the victim device processes maliciously crafted web content.

Details of CVE-2024-23222 on SOCRadar Vulnerability Intelligence

As a zero-day vulnerability, CVE-2024-23222 is currently being exploited in the wild; no further information is …

address advisory apple apple zero-day arbitrary code attackers browser code cve cve-2024-23222 cvss defined device engine fix flaw products security security advisory security updates type confusion updates victim vulnerability web web browser webkit zero-day zero-day vulnerability