Exploit / PoCcritical
Operation Triangulation attacks relied on an undocumented hardware feature
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-32434 | Integer Overflow in Apple iOS, iPadOS, macOS and watchOS Grants Kernel-Privilege Code Execution | 7.8 | 52% | KEV | KEV |
| CVE-2023-38606 | Kernel State-Tampering Flaw in Apple iOS, iPadOS, macOS, tvOS and watchOS | 5.5 | 3% | KEV | KEV |
| CVE-2023-41990 | Font Parsing Code Execution Flaw in Apple iOS, iPadOS, macOS, tvOS, watchOS | 7.8 | 1% | KEV | KEV |
From the original article
4 min read at securityaffairs.com
Experts discovered that Operation Triangulation targeting Apple iOS devices leveraged an undocumented hardware feature. Researchers from the Russian cybersecurity firm Kaspersky discovered that threat actors behind the Operation Triangulation exploited an undocumented hardware feature to target Apple iOS devices.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.