WebKit Memory Corruption (CVE‑2023‑43010) Exploited by Coruna Kit Prompts Apple to Patch Older iOS, iPadOS & macOS Devices
What It Is — Apple back‑ported a fix for CVE‑2023‑43010, a WebKit memory‑corruption flaw that can be triggered by malicious web content. The vulnerability is leveraged by the Coruna exploit kit to achieve remote code execution on iOS, iPadOS and macOS Sonoma devices.
Exploitability — Active exploitation observed in the wild via the Coruna kit; proof‑of‑concept code publicly available. CVSS (when disclosed) is estimated ≥ 8.0 (High).
Affected Products — iOS 16.0‑16.5, iPadOS 16.0‑16.5, macOS 14.0 (Sonoma) and earlier releases that remain in use on legacy Apple hardware.
TPRM Impact —
- Legacy Apple devices in corporate fleets may be a foothold for attackers, exposing confidential data and internal networks.
- Third‑party vendors that rely on outdated Apple OS versions could become an indirect attack vector, amplifying supply‑chain risk.
Recommended Actions —
- Deploy Apple’s March 2026 security updates to all iOS, iPadOS and macOS Sonoma devices, especially those running legacy versions.
- Enforce patch‑management policies via MDM to ensure timely installation of future Apple releases.
- Conduct vulnerability scans for WebKit‑related exploits and monitor endpoint logs for Coruna‑specific IOCs.
- Review contracts with vendors that supply Apple hardware to confirm they maintain supported OS versions.
Source: The Hacker News