Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Apple security patch release for CVE-2023-43010

Security Patch Release
First reported
Last updated
Happening score
H score 38
2 unique sources, 2 articles

Summary

Hide ▲

Apple backported Coruna-linked WebKit fixes to older iOS and iPadOS devices, reducing exposure on legacy hardware that cannot move to the latest release. The update extends protection for CVE-2023-43010 and related flaws to iPhones and iPads left behind by newer versions. It matters because the flaw was used in an exploit kit that could process malicious web content and trigger memory corruption.

Cases

Coruna iPhone exploitation and Apple response (5)

Related Happenings

Apple iOS, macOS, and Safari security updates (multiple vulnerabilities)

Security Patch Release
H score33 First: 30.06.2026 10:15 Last: 30.06.2026 10:15 Sources 1

About this happening: Apple released security updates for iOS, macOS, and Safari that fix over three dozen flaws, including four WebKit vulnerabilities. The update bundle covers...

Open Happening

Apple Passwords app and Safari add Apple Intelligence-powered automatic password repair

Security Tool/Service
H score10 First: 09.06.2026 00:03 Last: 09.06.2026 00:03 Sources 1

About this happening: Apple Passwords app and Safari are adding an Apple Intelligence feature that can automatically repair weak or compromised passwords, reducing password-hygiene risk for...

Open Happening

Google security patch release for CVE-2025-48595

Security Patch Release
H score45 First: 02.06.2026 14:10 Last: 02.06.2026 14:10 Sources 1

About this happening: Google's June 2026 Android security patches address 124 vulnerabilities, including an actively exploited zero-day. The release ships as the 2026-06-01 and 2026-0...

Open Happening

Avada Builder 3.15.3 patch release (CVE-2026-4782, CVE-2026-4798)

Security Patch Release
H score21 First: 15.05.2026 18:56 Last: 15.05.2026 18:56 Sources 1

About this happening: Avada Builder shipped version 3.15.3 as the full fix for CVE-2026-4782 and CVE-2026-4798, closing the plugin flaws that could expose files and database data. A pri...

Open Happening

IOS 26.5 beta rolls out default end-to-end encrypted RCS messaging on iPhone and Android

Security Tool/Service
H score11 First: 12.05.2026 08:18 Last: 12.05.2026 08:18 Sources 1

About this happening: Apple's iOS 26.5 beta adds default end-to-end encrypted RCS messaging for iPhone and Android users, strengthening privacy in cross-platform chats. The rollout cove...

Open Happening

Timeline

  3. 12.03.2026 11:58 1 articles · 4mo ago

    Apple ships the Coruna-linked CVE-2023-43010 fix in iOS 17.2

    Mitigation Patch Update

    Apple shipped a fix associated with the Coruna exploit in iOS 17.2 on December 11, 2023, addressing CVE-2023-43010, a WebKit flaw that could result in memory corruption when processing maliciously crafted web content.

    Show sources
    Open in new tab
  5. 12.03.2026 11:58 2 articles · 4mo ago

    Apple backports Coruna-linked fixes to older iPhone and iPad models

    Mitigation Patch Update

    Apple backported the Coruna-linked CVE-2023-43010 fix to iOS 15.8.7, iPadOS 15.8.7, iOS 16.7.15, and iPadOS 16.7.15 for older iPhone and iPad models that cannot update to the latest iOS version, including iPhone 6s, iPhone 7, iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), iPod touch (7th generation), iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation, while Google described Coruna as an exploit kit with 23 exploits across five chains targeting iPhone models on iOS 13.0–17.2.1.

    Show sources
    Open in new tab