Search: CVE-2024-23222

CVE-2024-23222 is a high-severity type confusion vulnerability in Apple Safari and WebKit that may allow processing of maliciously crafted web content to lead to arbitrary code execution. The issue was addressed with improved checks and memory handling. This vulnerability is associated with the Coruna exploit and affects multiple Apple platforms including iOS, iPadOS, macOS, tvOS, and visionOS. Apple released official patches in Safari 17.3 and various OS updates starting January 22, 2024, including backports for devices unable to upgrade to the latest OS versions. The CVSS score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of publication. The vendor advisory confirms the availability of official fixes across affected platforms.

The Coruna iOS exploit framework, evolving over seven months, uses two exploit chains targeting different iOS versions. It delivers malicious code through over 600 domains embedded in web pages without requiring app installation or user consent. The framework includes advanced native modules capable of kernel memory manipulation, Apple Mobile File Integrity state changes, process memory reads, encrypted command-and-control communication, and artifact deletion. A supply-chain compromise via the npm package art-template enables delivery through legitimate application infrastructure, bypassing domain-based defenses.