A memory corruption vulnerability in Apple iOS, iPadOS, macOS, and Safari poses a high risk of arbitrary code execution when processing malicious web content.

This is a memory corruption flaw triggered by the processing of maliciously crafted web content. The vulnerability is exploitable by an unauthenticated remote attacker through user interaction, such as visiting a compromised website.

The vulnerability carries a CVSS score of 8.8, indicating a high level of severity. Successful exploitation could allow an attacker to achieve code execution on the target device, potentially leading to unauthorized data access, system instability, or full device compromise. Such outcomes present significant risks to organizational data confidentiality and user privacy.

Immediate Action: Update all affected Apple devices to the versions where this issue is addressed: iOS and iPadOS 17.2, 16.7.15, 15.8.7, macOS Sonoma 14.2, and Safari 17.2.

Proactive Monitoring: Review system logs for unusual crash reports or unexpected application terminations that may indicate attempted memory corruption exploits.

Compensating Controls: Utilize endpoint protection software and ensure that browser-based security features are enabled to limit the impact of malicious web content.

Public Exploit Available: Unknown

Given the high CVSS score and the nature of memory corruption vulnerabilities, this flaw represents a significant security risk. Organizations should prioritize the deployment of the specified Apple security updates across all managed devices to eliminate the underlying vulnerability and prevent potential exploitation.