PT-2024-13027 · Apple · Apple Macos+3

Félix Poulin-Bélanger · Published 2024-01-01 · Updated 2026-03-13 · CVE-2023-41974

Positive Technologies · (AI Summary)

CVSS v3.1

7.8

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple macOS versions prior to 14

Description This issue involves a use-after-free condition addressed through improved memory management. A malicious application may potentially execute arbitrary code with kernel privileges. Proof-of-concept (PoC) code has been released, and a researcher was awarded a $70,000 bounty for revealing the flaw. The vulnerability, also known as 'Landa', affects the XNU kernel. Exploitation does not necessarily lead to kernel corruption requiring cleanup to prevent a kernel panic. The issue is considered a Latest Known Exploited Vulnerability (KEV).

Recommendations Update Apple iOS to version 17 or later. Update Apple iPadOS to version 17 or later. Update Apple macOS to version 14 or later.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2023-41974

Affected Products

Xnu Kernel

Ios

Ipados

Apple Macos

References · 24

• 🔥 https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit · Exploit
• https://support.apple.com/en-us/120949 · Vendor Advisory
• https://support.apple.com/en-us/126632 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41974 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41974 · Vendor Advisory
• https://twitter.com/the_yellow_fall/status/1742440521027789046 · Twitter Post
• https://t.me/cveNotify/154385 · Telegram Post
• https://twitter.com/sayako_8964/status/1912331046407844089 · Twitter Post
• https://t.me/cybersecuritytechnologies/9720 · Telegram Post
• https://t.me/EchelonEyes/4410 · Telegram Post
• https://twitter.com/blindu_ch/status/1744497852917715207 · Twitter Post
• https://support.apple.com/en-us/HT213938 · Security Note, Vendor Advisory
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41974 · Note
• https://support.apple.com/kb/HT213938 · Security Note, Vendor Advisory
• https://twitter.com/Komodosec/status/1742457287355322848 · Twitter Post