CVE-2023-41974
KEVHIGH 7.8EPSS 2.0%
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to execute arbitrary code with kernel privileges.
- Affected
- Apple · iOS and iPadOS
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- 1.96% chance of exploitation in the next 30 days, 80th percentile
- CISA KEV
- added 2026-03-05
- Published
- 2024-01-10
- Updated
- 2026-03-12
Proof-of-concept exploits (4)
- https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit
- Lrdsnow/PureKFD839★ · 2024-11-23
- Lrdsnow/PureKFDLinux6★ · 2024-10-19
- felix-pb/kfd1016★ · 2024-01-21
Security advisories
- https://support.apple.com/en-us/120949
- https://support.apple.com/en-us/126632
- https://support.apple.com/en-us/HT213938
- https://support.apple.com/kb/HT213938