CISA
CISA flags Apple iOS kernel exploit CVE-2023-41974 in KEV list
According to CISA, the Known Exploited Vulnerabilities (KEV) catalog lists CVE-2023-41974 as an Apple iOS and iPadOS Use-After-Free vulnerability, which could allow an app to execute arbitrary code with kernel privileges. The entry notes a Related CWE of CWE-416 and states that it is Unknown whether it has been used in ransomware campaigns. Date Added is 2026-03-05 and Due Date is 2026-03-26.
The guidance accompanying the entry advises applying mitigations per vendor instructions, following applicable BOD 22-01 guidance for cloud services, or discontinuing use of the product if mitigations are unavailable. Additional links provided include support articles from Apple and the NIST NVD page for CVE-2023-41974.
This KEV item is part of a broader CISA effort to maintain an authoritative source of vulnerabilities that have been exploited in the wild to help organisations prioritise their vulnerability management efforts.
Story timeline CVE-2023-41974
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 5 Mar · 21:25 UTC | CISA | CVE-2023-41974: Attackers can run kernel code on iOS and iPadOS |
| Thu 5 Mar · 21:44 UTC | CISA | CISA flags Apple iOS kernel exploit CVE-2023-41974 in KEV list (this article) |
| Fri 6 Mar · 09:57 UTC | Security Affairs | CISA Adds CVEs to KEV for Apple Rockwell and Hikvision Flaws |
| Fri 6 Mar · 13:30 UTC | SecurityWeek | CISA Adds Coruna iOS Exploit Kit Flaws to the KEV List, 12 CVEs |
| Fri 6 Mar · 20:11 UTC | Ars Technica | CISA orders patch after Coruna kit exploits three iOS CVEs |
| Thu 12 Mar · 11:08 UTC | The Hacker News | Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit |
| Thu 12 Mar · 15:11 UTC | SecurityWeek | Apple Updates Older iOS Versions to Patch Coruna Exploits |
| Thu 12 Mar · 15:41 UTC | Security Affairs | Apple issues emergency fixes for Coruna flaws in older iOS versions |
| Thu 12 Mar · 18:16 UTC | Malwarebytes | Apple patches Coruna exploit kit flaws for older iOS versions |