Exploit / PoCcritical

Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge

Security Affairsby @securityaffairsMar 20, 2026 · 11:22 UTC (Mar 20, 2026)7 min read6 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-30952 CVE-2022-48503 CVE-2023-43000 CVE-2024-23222 CVE-2023-32409 CVE-2020-27932 CVE-2020-27950 CVE-2023-32434 CVE-2023-41974 CVE-2023-38606 CVE-2024-23225 CVE-2024-23296 CVE-2025-31277 CVE-2026-20700 CVE-2025-43529 CVE-2025-14174 CVE-2025-43510 CVE-2025-43520

Tags: cve-2021-30952 cve-2022-48503 cve-2023-32409 cve-2023-43000 cve-2024-23222 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-27932 +1 related CVE CVE-2020-27950	Kernel Type Confusion in Apple iOS, macOS, watchOS Allows Code Execution (CVE-2020-27932)	7.8 group max	10%	KEV	Dec 8, 2020 KEV Nov 3, 2021
CVE-2021-30952	CVE-2021-30952: Integer Overflow in Apple Safari/WebKit Allows Arbitrary Code Execution	7.8	7%	KEVPoC	Aug 24, 2021 KEV Mar 5, 2026
CVE-2022-48503	Apple Web Content Bounds-Check Flaw Enables Code Execution Across iOS, macOS, Safari	8.8	3%	KEV	Aug 14, 2023 KEV Oct 20, 2025
CVE-2023-32409 +1 related CVE CVE-2023-32434	WebKit Sandbox Escape in Apple Safari, iOS, iPadOS, macOS, tvOS, and watchOS	8.6 group max	17%	KEV	Jun 23, 2023 KEV May 22, 2023
CVE-2023-38606	Kernel State-Tampering Flaw in Apple iOS, iPadOS, macOS, tvOS and watchOS	5.5	3%	KEV	Jul 27, 2023 KEV Jul 26, 2023
CVE-2023-41974	Use-After-Free Kernel Code Execution Flaw in Apple iOS and iPadOS	7.8	2%	KEVPoC	Jan 10, 2024 KEV Mar 5, 2026
CVE-2023-43000	Use-After-Free in Apple WebKit: Safari, iOS, iPadOS, macOS (CVE-2023-43000)	8.8	4%	KEVPoC	Nov 5, 2025 KEV Mar 5, 2026
CVE-2024-23222	Apple WebKit Type Confusion Enables Arbitrary Code Execution Across iOS, macOS, tvOS	8.8	11%	KEV	Jan 23, 2024 KEV Jan 23, 2024
CVE-2024-23225 +1 related CVE CVE-2024-23296	Memory Corruption Kernel Protection Bypass in Apple iOS, macOS, tvOS, visionOS	7.8	1%	KEV	Mar 5, 2024 KEV Mar 6, 2024
CVE-2025-14174	Out of Bounds Memory Access in Google Chromium ANGLE Affects Chrome, Edge, Opera	8.8	55%	KEV	Dec 12, 2025 KEV Dec 12, 2025
CVE-2025-31277	Buffer Overflow in Apple WebKit (Safari, iOS/iPadOS, macOS, WebKitGTK, WPE)	8.8	2%	KEVPoC	Jul 30, 2025 KEV Mar 20, 2026
CVE-2025-43510 +1 related CVE CVE-2025-43520	Improper Locking Memory Corruption in Apple iOS, iPadOS, macOS, tvOS, visionOS, watchOS	7.8 group max	<1%	KEV	Dec 12, 2025 KEV Mar 20, 2026
CVE-2025-43529	Use-After-Free in Apple WebKit (Safari, iOS, macOS) Allows Arbitrary Code Execution	8.8	26%	KEV	Dec 17, 2025 KEV Dec 15, 2025
CVE-2026-20700	Exploited Memory Corruption Flaw in Apple iOS, iPadOS, macOS, tvOS, visionOS, watchOS	7.8	2%	KEV	Feb 11, 2026 KEV Feb 12, 2026

From the original article

7 min read at securityaffairs.com

Apple warns that outdated iPhones are vulnerable to Coruna and DarkSword exploit kits and urges users to update iOS. Apple has warned that iPhones running outdated iOS versions are at risk from exploit kits like Coruna and DarkSword . These attacks use malicious web content to trigger infection chains that can steal sensitive data.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.