{"id":222863,"date":"2026-03-12T05:58:00","date_gmt":"2026-03-12T09:58:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/03\/12\/apple-issues-security-updates-for-older-ios-devices-targeted-by-coruna-webkit-exploit\/"},"modified":"2026-03-12T15:20:11","modified_gmt":"2026-03-12T19:20:11","slug":"apple-issues-security-updates-for-older-ios-devices-targeted-by-coruna-webkit-exploit","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/03\/12\/apple-issues-security-updates-for-older-ios-devices-targeted-by-coruna-webkit-exploit\/","title":{"rendered":"Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit"},"content":{"rendered":"<p><a href=\"https:\/\/thehackernews.com\/2026\/03\/apple-issues-security-updates-for-older.html\">Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit<\/a><\/p>\n<p><a href=\"https:\/\/thehackernews.com\/2026\/03\/apple-issues-security-updates-for-older.html\">https:\/\/thehackernews.com\/2026\/03\/apple-issues-security-updates-for-older.html<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-03-12 05:58:00<\/a><\/p>\n<p>Source Domain: <a href=\"thehackernews.com\">thehackernews.com<\/a><\/p>\n<p><span class=\"p-author\">\ue804<span class=\"author\">Ravie Lakshmanan<\/span>\ue802<span class=\"author\">Mar 12, 2026<\/span><\/span><span class=\"p-tags\">Vulnerability \/ Malware<\/span><\/p>\n<p>Apple on Wednesday backported fixes for a security flaw in iOS, iPadOS, and macOS Sonoma to older versions after it was found to be used as part of the Coruna exploit kit.<\/p>\n<p>The vulnerability, tracked as <strong>CVE-2023-43010<\/strong>, relates to an unspecified vulnerability in WebKit that could result in memory corruption when processing maliciously crafted web content. The iPhone maker said the issue was addressed with improved handling.\u00a0<\/p>\n<p>&#8220;This fix associated with the Coruna exploit kit was shipped in iOS 17.2 on December 11th, 2023,&#8221; Apple said in an advisory. &#8220;This update brings that fix to devices that cannot update to the latest iOS version.&#8221;<\/p>\n<p>Fixes for CVE-2023-43010 were originally released by Apple in the following versions &#8211;<\/p>\n<p>The latest round of fixes brings it to older versions of iOS and iPadOS &#8211;<\/p>\n<ul>\n<li>iOS 15.8.7 and iPadOS 15.8.7 &#8211; iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation)<\/li>\n<li>iOS 16.7.15 and iPadOS 16.7.15 &#8211; iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation<\/li>\n<\/ul>\n<p>What&#8217;s more, iOS 15.8.7 and iPadOS 15.8.7 incorporate patches for three more vulnerabilities associated with the Coruna exploit kit &#8211;<\/p>\n<ul>\n<li><strong>CVE-2023-43000<\/strong> (Originally fixed in iOS 16.6, released on July 24, 2023) &#8211; A use-after-free issue in WebKit that could lead to memory corruption when processing maliciously crafted web content.<\/li>\n<li><strong>CVE-2023-41974<\/strong> (Originally fixed in iOS 17, released on September 18, 2023) &#8211; A use-after-free issue in the kernel that could allow an app to execute arbitrary code with kernel privileges.<\/li>\n<li><strong>CVE-2024-23222<\/strong> (Originally fixed in iOS 17.3, released on January 22, 2024) &#8211; A type confusion issue in WebKit that could lead to arbitrary code execution when processing maliciously crafted web content.<\/li>\n<\/ul>\n<p>Details of Coruna emerged earlier this month after Google said the exploit kit&#8230;<\/p>\n<p><a href=\"https:\/\/thehackernews.com\/2026\/03\/apple-issues-security-updates-for-older.html\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit https:\/\/thehackernews.com\/2026\/03\/apple-issues-security-updates-for-older.html Publish&#8230;<\/p>\n","protected":false},"author":1,"featured_media":222864,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhYxpx0H72-jraYxYXM_LUEtyv1M503LKgvsrmHcmXew61h2RfR4Q5uyuLKb6h6qltO1UedF9lMjEC3MoOgxDNO8zB4BzKjkVusHicqzNXSK3Tojlq10A7xDds9wDdyKTGtwWTKMAvoR5-l5nK7gnZQOUDbTbOXGWAezt1MjNJQpPh3MalEkI-nhOmTZ7fW\/s16000\/iphones.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[31,32,27],"class_list":["post-222863","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-exploit","tag-malware","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/222863"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=222863"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/222863\/revisions"}],"predecessor-version":[{"id":222865,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/222863\/revisions\/222865"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/222864"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=222863"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=222863"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=222863"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}