Vulnerability intelligence
CVE-2023-32434
Apple Multiple Products Integer Overflow Vulnerability
Apple Multiple Products
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
CVSS Score
—
Unrated
EPSS — Exploit Probability
52%
Riskier than 99% of all CVEs · checked 2026-10-17
Exploitation
Confirmed in the wild
KEV since 2023-06-23
Remediation
Unconfirmed
Federal deadline 2023-07-14
CISA required action
Apply updates per vendor instructions. Deadline for federal agencies: 2023-07-14.
3 articles across 3 outlets · first covered Mar 26, 2026 · latest Mar 27, 2026
Coverage timeline
-
Coruna iOS Exploit Kit Likely an Update to Operation Triangulationwww.securityweek.com · Mar 27, 2026
-
Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacksthehackernews.com · Mar 26, 2026
-
Coruna: the framework used in Operation Triangulationsecurelist.com · Mar 26, 2026