Exploit / PoCcritical

Google uncovers Coruna iOS Exploit Kit targeting iOS 13

Security Affairsby @securityaffairsMar 5, 2026 · 09:03 UTC (Mar 5, 2026)4 min read5 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-30952 CVE-2022-48503 CVE-2023-43000 CVE-2024-23222 CVE-2023-32409 CVE-2020-27932 CVE-2020-27950 CVE-2023-32434 CVE-2023-41974 CVE-2023-38606 CVE-2024-23225 CVE-2024-23296

Tags: cve-2021-30952 cve-2022-48503 cve-2023-43000 cve-2024-23222 cve-2023-32409 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-27932 +1 related CVE CVE-2020-27950	Kernel Type Confusion in Apple iOS, macOS, watchOS Allows Code Execution (CVE-2020-27932)	7.8 group max	10%	KEV	Dec 8, 2020 KEV Nov 3, 2021
CVE-2021-30952	CVE-2021-30952: Integer Overflow in Apple Safari/WebKit Allows Arbitrary Code Execution	7.8	7%	KEVPoC	Aug 24, 2021 KEV Mar 5, 2026
CVE-2022-48503	Apple Web Content Bounds-Check Flaw Enables Code Execution Across iOS, macOS, Safari	8.8	3%	KEV	Aug 14, 2023 KEV Oct 20, 2025
CVE-2023-32409 +1 related CVE CVE-2023-32434	WebKit Sandbox Escape in Apple Safari, iOS, iPadOS, macOS, tvOS, and watchOS	8.6 group max	17%	KEV	Jun 23, 2023 KEV May 22, 2023
CVE-2023-38606	Kernel State-Tampering Flaw in Apple iOS, iPadOS, macOS, tvOS and watchOS	5.5	3%	KEV	Jul 27, 2023 KEV Jul 26, 2023
CVE-2023-41974	Use-After-Free Kernel Code Execution Flaw in Apple iOS and iPadOS	7.8	2%	KEVPoC	Jan 10, 2024 KEV Mar 5, 2026
CVE-2023-43000	Use-After-Free in Apple WebKit: Safari, iOS, iPadOS, macOS (CVE-2023-43000)	8.8	4%	KEVPoC	Nov 5, 2025 KEV Mar 5, 2026
CVE-2024-23222	Apple WebKit Type Confusion Enables Arbitrary Code Execution Across iOS, macOS, tvOS	8.8	11%	KEV	Jan 23, 2024 KEV Jan 23, 2024
CVE-2024-23225 +1 related CVE CVE-2024-23296	Memory Corruption Kernel Protection Bypass in Apple iOS, macOS, tvOS, visionOS	7.8	1%	KEV	Mar 5, 2024 KEV Mar 6, 2024

From the original article

4 min read at securityaffairs.com

Google warns of the Coruna iOS exploit kit, using 23 exploits across five chains to target iPhones running iOS 13–17. 2. 1, but not the latest iOS.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.