AEGLIX vulnerability intelligence
CVE-2024-23222
HIGH · CVSS 8.8 · Analyzed
Published: 2024-01-23 · Updated: 2026-06-17 · Source: NVD
Vulnerability overview
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.
Severity and scoring
- CVSS score
- 8.8 · HIGH
- CVSS version
- 3.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-843
CVSS measures technical severity; it does not establish whether this vulnerability is being exploited in your environment.
Known exploitation and remediation
Listed in CISA’s Known Exploited Vulnerabilities catalog.
- Affected product
- Apple · Multiple Products
- Added to catalog
- 2024-01-23
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- CISA remediation due date
- 2024-02-13
CISA deadlines apply to the organizations covered by its directives. Confirm your own remediation requirements.
Verify affected versions and patch availability in the vendor advisory before making changes.
Affected products and versions
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Before (exclusive): 17.3
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Before (exclusive): 15.8.7
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
From (inclusive): 16.0
Before (exclusive): 16.7.5
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
From (inclusive): 17.0
Before (exclusive): 17.3
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Before (exclusive): 15.8.7
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
From (inclusive): 16.0
Before (exclusive): 16.7.5
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
From (inclusive): 17.0
Before (exclusive): 17.3
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
From (inclusive): 12.0
Before (exclusive): 12.7.3
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
From (inclusive): 13.0
Before (exclusive): 13.6.4
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
From (inclusive): 14.0
Before (exclusive): 14.3
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Before (exclusive): 17.3
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Before (exclusive): 1.0.2
These are NVD CPE applicability entries. Some products depend on configuration conditions; consult the official record to confirm applicability.
Advisories and references
- https://support.apple.com/en-us/118479
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120304
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120305
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120307
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120309
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120310
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120311
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120339
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/126632
Release Notes · Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Feb/6
Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/34
Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jan/40
Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/US43EQFC2IS66EA2CPAZFH2RQ6WD7PKF/
Broken Link
- https://support.apple.com/en-us/HT214055
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/HT214059
Release Notes · Vendor Advisory
- https://support.apple.com/en-us/HT214061
Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT214055
Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT214056
Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT214057
Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT214058
Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT214059
Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT214061
Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT214063
Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT214070
Release Notes · Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23222
US Government Resource