CVE-2023-41974: Kernel Exploit in iOS and iPadOS

CVE-2023-41974 is a use-after-free memory management vulnerability in iOS and iPadOS. This flaw allows a locally installed app to execute arbitrary code with kernel privileges, the highest access level on the operating system. The impact is critical for any organization managing corporate Apple devices, since the kernel is the central point of all security controls.

The vulnerability has a CVSS score of 7.8 (high range). Apple released patches in January 2024 via iOS 17, iPadOS 17, iOS 15.8.7, and iPadOS 15.8.7. On November 7, 2026, a Swift implementation of the exploit was registered on GitHub: the signal confirms that the PoC is now publicly available, highlighting the need for urgent verification even though the vulnerability has been known for years.

IT teams and CISOs must immediately verify the patching status across all iOS and iPadOS devices in use. Check via Mobile Device Management (MDM) which version is running. Prioritize updating unpatched devices, especially those with access to critical resources. If the device cannot yet receive patches, consider temporary network isolation from corporate systems until it is updated.