Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit

Apple has backported security fixes for older iOS and iPadOS devices to address vulnerabilities exploited by the Coruna exploit kit.

• •CVE-2023-43010 is a WebKit memory corruption vulnerability originally patched in iOS 17.2 (December 2023), now extended to iOS 15.8.7 and iOS 16.7.15 for older devices.
• •iOS 15.8.7 also patches three additional Coruna-related CVEs: CVE-2023-43000 (WebKit use-after-free), CVE-2023-41974 (kernel arbitrary code execution), and CVE-2024-23222 (WebKit type confusion).
• •Google revealed Coruna features 23 exploits across five chains targeting iPhones running iOS 13.0 to 17.2.1.
• •iVerify tracks the malware framework using Coruna as CryptoWaters, noting similarities to frameworks linked to U.S. government-affiliated threat actors.
• •