Skip to content
NewA calmer, faster ZeroHour

Apple issues emergency fixes for Coruna flaws in older iOS versions

Security Affairsby @securityaffairs ()2 min read8 · 4 reads
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2020-27932
+1 related CVE
Kernel Type Confusion in Apple iOS, macOS, watchOS Allows Code Execution (CVE-2020-27932)
7.8
group max
10%KEV
KEV
CVE-2021-30952
CVE-2021-30952: Integer Overflow in Apple Safari/WebKit Allows Arbitrary Code Execution
7.87%KEVPoC
KEV
CVE-2022-48503
Apple Web Content Bounds-Check Flaw Enables Code Execution Across iOS, macOS, Safari
8.83%KEV
KEV
CVE-2023-32409
+1 related CVE
WebKit Sandbox Escape in Apple Safari, iOS, iPadOS, macOS, tvOS, and watchOS
8.6
group max
17%KEV
KEV
CVE-2023-38606
Kernel State-Tampering Flaw in Apple iOS, iPadOS, macOS, tvOS and watchOS
5.53%KEV
KEV
CVE-2023-41974
Use-After-Free Kernel Code Execution Flaw in Apple iOS and iPadOS
7.82%KEVPoC
KEV
CVE-2023-43000
Use-After-Free in Apple WebKit: Safari, iOS, iPadOS, macOS (CVE-2023-43000)
8.84%KEVPoC
KEV
CVE-2023-43010
The issue was addressed with improved memory handling
8.8<1%
CVE-2024-23222
Apple WebKit Type Confusion Enables Arbitrary Code Execution Across iOS, macOS, tvOS
8.811%KEV
KEV
CVE-2024-23225
+1 related CVE
Memory Corruption Kernel Protection Bypass in Apple iOS, macOS, tvOS, visionOS
7.81%KEV
KEV

From the original article

2 min read at securityaffairs.com

Apple released iOS 16. 7. 15 and 15.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.