Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-32439+2 related CVEs | Type Confusion in Apple WebKit (Safari, iOS, iPadOS, macOS) Enables Code Execution | 8.8 group max | 24% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
Apple has released patches for three zero-day vulnerabilities (CVE-2023-32434, CVE-2023-32435, CVE-2023-32439) exploited in the wild. The first two have been reported by Kaspersky researchers Georgy Kucherin, Leonid Bezvershenko and Boris Larin following their discovery of the iOS spyware implant they dubbed TriangleDB, and the third one by an anonymous researcher.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.