In CISA KEVNot scored
CVE-2024-23222
Apple Multiple Products WebKit Type Confusion Vulnerability
AppleMultiple Products
Status
- Exploited in the wild
- In CISA KEV since 23 Jan 2024
- Vendor fix available
Federal deadlineTue 13 Feb 2024, 23:59 UTC
Passed 984 days ago
CISA KEV · added 23 Jan 2024
Exploit probabilityEPSSchecked 25 Oct
11%probability of exploitation in the next 30 days
Higher than 96% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, This update brings that fix to devices that cannot update to the latest iOS version.
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Coverage 5 articles · 4 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 4 Mar · 14:38 UTC | The Hacker News | Coruna iOS Exploit Kit uses 23 exploits including CVE-2024-23222 |
| Thu 12 Mar · 11:08 UTC | The Hacker News | Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit |
| Thu 12 Mar · 15:11 UTC | SecurityWeek | Apple Updates Older iOS Versions to Patch Coruna Exploits |
| Thu 12 Mar · 15:41 UTC | Security Affairs | Apple issues emergency fixes for Coruna flaws in older iOS versions |
| Thu 12 Mar · 18:16 UTC | Malwarebytes | Apple patches Coruna exploit kit flaws for older iOS versions |
- Apple patches Coruna exploit kit flaws for older iOS versionsMalwarebytes · mentions it in passing
- Apple issues emergency fixes for Coruna flaws in older iOS versionsSecurity Affairs · mentions it in passing
- Apple Updates Older iOS Versions to Patch Coruna ExploitsSecurityWeek · mentions it in passing
- Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit ExploitThe Hacker News · mentions it in passing
- Coruna iOS Exploit Kit uses 23 exploits including CVE-2024-23222The Hacker News · first in our coverage