Skip to content
NewA calmer, faster ZeroHour

Coruna exploit reveals evolution of Triangulation iOS exploitation framework

Security Affairsby @securityaffairs ()4 min read3 · 1 read
Analyze CVE-2023-32434 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-32434
Integer Overflow in Apple iOS, iPadOS, macOS and watchOS Grants Kernel-Privilege Code Execution
7.852%KEV
KEV
CVE-2023-38606
Kernel State-Tampering Flaw in Apple iOS, iPadOS, macOS, tvOS and watchOS
5.53%KEV
KEV

From the original article

4 min read at securityaffairs.com

Kaspersky found Coruna iOS exploits reuse updated code from the 2023 Operation Triangulation attacks, suggesting a possible link. Kaspersky researchers discovered that the Coruna iOS exploit kit uses an updated version of the same kernel exploit seen in the 2023 Operation Triangulation campaign.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.