CVE-2023-41990

Vulnerability updated a year ago (2024-01-10T14:25:38.971Z)

Download STIX

Preview STIX

Not enough context has been learned about CVE-2023-41990 for a description yet. However we're tracking it as a Vulnerability profile. Vulnerability: A flaw in software design or implementation

Description last updated:

What's your take? (Question 1 of 2)

Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.

Aliases We are not currently tracking any aliases

Miscellaneous Associations

Other elements of context that could aid in the identification of relevance

Apple

Operation Tr...

Analyst Notes & Discussion

Be the first to leave your mark here! Log in to share your views and vote.

Associated Vulnerabilities

To see the evidence that has resulted in these vulnerability associations, create a free account

Alias Description	Association Type	Votes
The CVE-2023-32434 Vulnerability is associated with CVE-2023-41990. CVE-2023-32434 is a high severity software vulnerability that allows for arbitrary code execution with kernel privileges. This flaw, along with two others (CVE-2023-32435 and CVE-2023-32439), were identified as zero-days in June 2023, exploited to deploy the Triangulation spyware via iMessage. The s	Unspecified	2

Source Document References

Information about the CVE-2023-41990 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more

Source Link	CreatedAt	Title
CERT-EU	a year ago	CISA Adds Six Known Exploited Vulnerabilities to Catalog – The Security Blogger
CERT-EU	a year ago	Operation Triangulation: talk on 37С3
CERT-EU	a year ago	CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe , D-Link, Joomla Under Attack
CERT-EU	a year ago	CISA warns agencies of fourth flaw used in Triangulation spyware attacks
Securityaffairs	a year ago	CISA adds Apache Superset bug to its Known Exploited Vulnerabilities catalog
CERT-EU	a year ago	High-severity RCE among 6 bugs added to CISA's exploited vulnerability catalog
CERT-EU	a year ago	CISA Adds Six Known Exploited Vulnerabilities to Catalog \| CISA
CERT-EU	a year ago	CISA Adds Six Known Exploited Vulnerabilities to Catalog
CERT-EU	a year ago	"Forgotten" debugging registers enabled Triangulation exploit against iPhones
CERT-EU	a year ago	The biggest cybersecurity and cyberattack stories of 2023
DARKReading	a year ago	‘Operation Triangulation’ Spyware Attackers Bypass iPhone Memory Protections
Securityaffairs	a year ago	Operation Triangulation attacks relied on an undocumented hardware feature
CERT-EU	a year ago	'Operation Triangulation' exposes advanced iMessage attack on security firm
CERT-EU	a year ago	iPhone 0-click spyware campaign 'Triangulation' detailed
CERT-EU	a year ago	Operation Triangulation: talk on 37С3
CERT-EU	a year ago	Most Sophisticated iPhone Hack Ever Exploited Apple's Hidden Hardware Feature
CERT-EU	a year ago	iPhone Triangulation attack abused undocumented hardware feature
CERT-EU	a year ago	Operation Triangulation: The last (hardware) mystery – GIXtools
CERT-EU	a year ago	Operation Triangulation: The last (hardware) mystery
CERT-EU	2 years ago	SAS 2023: Key Research