Vulnerability intelligence
CVE-2023-38606
Apple Multiple Products Kernel Unspecified Vulnerability
Apple Multiple Products
This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.
CVSS Score
—
Unrated
EPSS — Exploit Probability
2.9%
Riskier than 87% of all CVEs · checked 2026-10-19
Exploitation
Confirmed in the wild
KEV since 2023-07-26
Remediation
Unconfirmed
Federal deadline 2023-08-16
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2023-08-16.
3 articles across 3 outlets · first covered Mar 26, 2026 · latest Mar 27, 2026
Coverage timeline
-
Coruna iOS Exploit Kit Likely an Update to Operation Triangulationwww.securityweek.com · Mar 27, 2026
-
Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacksthehackernews.com · Mar 26, 2026
-
Coruna: the framework used in Operation Triangulationsecurelist.com · Mar 26, 2026