{"metadata": {"vulnerability": "CVE-2023-41992", "count": 80, "kinds": {"milestone": 8, "sighting": 28, "kev": 11, "other": 33}, "linked_omitted": 0}, "data": [{"timestamp": "2023-09-06T17:40:06.142Z", "date_only": false, "value": "2023-09-06T17:40:06.142Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-21T18:23:49.779Z", "date_only": false, "value": "2023-09-21T18:23:49.779Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-09-21T19:15:11Z", "date_only": false, "value": "2023-09-21T19:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WCCH-RMXQ-7X86", "record": "GHSA-WCCH-RMXQ-7X86", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-09-21T19:15:11.520Z", "date_only": false, "value": "2023-09-21T19:15:11.520", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-41992", "record": "FKIE_CVE-2023-41992", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-21T19:15:11.520Z", "date_only": false, "value": "2023-09-21T19:15:11.520", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-41992", "record": "GSD-2023-41992", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2023-09-21T21:31:00Z", "date_only": false, "value": "2023-09-21T21:31:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WCCH-RMXQ-7X86", "record": "GHSA-WCCH-RMXQ-7X86", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-09-21T22:30:38Z", "date_only": false, "value": "2023-09-21T22:30:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/70916", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "6370decb-1b34-44b4-9d30-7ef750a151ea", "content": "\u203c CVE-2023-41992 \u203c\n\nThe issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS 17.0.1 and iPadOS 17.0.1, watchOS 9.6.3, macOS Ventura 13.6, macOS Monterey 12.7, watchOS 10.0.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70916", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-22T00:00:00Z", "date_only": false, "value": "2023-09-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0772", "record": "CERTFR-2023-AVI-0772", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-09-22T04:00:00Z", "date_only": false, "value": "2023-09-22T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1116", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "577dbbc6-79a9-4b5e-b286-5907342533b4", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1116"}, {"timestamp": "2023-09-22T07:35:26Z", "date_only": false, "value": "2023-09-22T07:35:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_16/2023", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "cedbd39f-c55b-4d8c-8af0-567eea0257db", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_16/2023"}, {"timestamp": "2023-09-22T08:13:56Z", "date_only": false, "value": "2023-09-22T08:13:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-10", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "1df9df7f-af31-437f-b784-8d29b90b67aa", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-10"}, {"timestamp": "2023-09-22T09:32:03Z", "date_only": false, "value": "2023-09-22T09:32:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4878", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "f9646f28-72dc-4a22-94d1-95990e7a73c4", "content": "\u0411\u043e\u043b\u0442\u0443\u043d\u00a0-\u00a0\u043d\u0430\u0445\u043e\u0434\u043a\u0430 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u043e\u043d - \u0435\u0449\u0435 \u0438 \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u043d\u043e\u0430\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0445 3 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iPhone \u0438 Mac, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c spyware.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u044f\u0434\u0440\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 WebKit (CVE-2023-41993) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2023-41991), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u0432 Kernel Framework, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 API \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438 \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-41992) \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0448\u043b\u0438 \u043a\u0430\u043a. \u041d\u043e\u0432\u044b\u0435, \u0442\u0430\u043a \u0438 \u0441\u0442\u0430\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f iPhone 8 \u0438 \u043d\u043e\u0432\u0435\u0435, iPad mini 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b Mac \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS Monterey \u0438 \u043d\u043e\u0432\u0435\u0435, Apple Watch Series 4 \u0438 \u043d\u043e\u0432\u0435\u0435.\n\nApple \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 macOS 12.7/13.6, iOS 16.7/17.0.1, iPadOS 16.7/17.0.1 \u0438 watchOS 9.6.3/10.0.1 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0438 \u0443\u043b\u0443\u0447\u0448\u0438\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u0438\u0445\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445\u00a0Apple \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0433\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS \u0434\u043e iOS 16.7, \u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043d\u043e\u0432\u044b\u0445 0-day \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Citizen Lab \u0438 Google TAG, \u0440\u0435\u0447\u044c \u0432\u043d\u043e\u0432\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0434\u0442\u0438 \u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u0412\u0435\u0434\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0438\u043c\u0438 \u0436\u0435 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438\u00a0\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BLASTPASS, \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 iPhone \u0441 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c \u041f\u041e Pegasus \u043e\u0442 NSO Group.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c, \u043c\u043e\u0436\u0435\u0442 \u0447\u0442\u043e-\u0442\u043e \u043d\u043e\u0432\u0435\u043d\u044c\u043a\u043e\u0435.", "url": "https://t.me/true_secator/4878", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-22T15:18:37Z", "date_only": false, "value": "2023-09-22T15:18:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BitLenta/18165", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "c197eda5-2408-4ac0-a967-5dedb529c39e", "content": "\u0411\u043e\u043b\u0442\u0443\u043d\u00a0-\u00a0\u043d\u0430\u0445\u043e\u0434\u043a\u0430 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u043e\u043d - \u0435\u0449\u0435 \u0438 \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u043d\u043e\u0430\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0445 3 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iPhone \u0438 Mac, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c spyware.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u044f\u0434\u0440\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 WebKit (CVE-2023-41993) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2023-41991), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u0432 Kernel Framework, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 API \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438 \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-41992) \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0448\u043b\u0438 \u043a\u0430\u043a. \u041d\u043e\u0432\u044b\u0435, \u0442\u0430\u043a \u0438 \u0441\u0442\u0430\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f iPhone 8 \u0438 \u043d\u043e\u0432\u0435\u0435, iPad mini 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b Mac \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS Monterey \u0438 \u043d\u043e\u0432\u0435\u0435, Apple Watch Series 4 \u0438 \u043d\u043e\u0432\u0435\u0435.\n\nApple \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 macOS 12.7/13.6, iOS 16.7/17.0.1, iPadOS 16.7/17.0.1 \u0438 watchOS 9.6.3/10.0.1 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0438 \u0443\u043b\u0443\u0447\u0448\u0438\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u0438\u0445\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445\u00a0Apple \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0433\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS \u0434\u043e iOS 16.7, \u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043d\u043e\u0432\u044b\u0445 0-day \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Citizen Lab \u0438 Google TAG, \u0440\u0435\u0447\u044c \u0432\u043d\u043e\u0432\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0434\u0442\u0438 \u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u0412\u0435\u0434\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0438\u043c\u0438 \u0436\u0435 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438\u00a0\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BLASTPASS, \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 iPhone \u0441 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c \u041f\u041e Pegasus \u043e\u0442 NSO Group.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c, \u043c\u043e\u0436\u0435\u0442 \u0447\u0442\u043e-\u0442\u043e \u043d\u043e\u0432\u0435\u043d\u044c\u043a\u043e\u0435. (secator)", "url": "https://t.me/BitLenta/18165", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-22T18:46:40Z", "date_only": false, "value": "2023-09-22T18:46:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ap_security/127", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "2ffc7080-5459-4252-b13a-305f4e546d98", "content": "\ud83c\udf10\u0421\u0440\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 Apple \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 0-day \u0432 iOS, macOS \u0438 Safari\n\n\ud83c\udf4f\u0421\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b:\n\n\u274cCVE-2023-41991 - \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Security, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b\n\n\u274cCVE-2023-41992 - \u0431\u0440\u0435\u0448\u044c \u0432 Kernel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\n\u274cCVE-2023-41993 - \u0434\u044b\u0440\u0430 \u0432 WebKit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430\n\n\ud83d\udee0\u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b!\n\n#infosec #itnews #cve", "url": "https://t.me/ap_security/127"}, {"timestamp": "2023-09-22T18:46:40Z", "date_only": false, "value": "2023-09-22T18:46:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ap_security/57", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "af075af2-288b-4893-9281-5ee82ed1e5f9", "content": "\ud83c\udf10\u0421\u0440\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 Apple \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 0-day \u0432 iOS, macOS \u0438 Safari\n\n\ud83c\udf4f\u0421\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b:\n\n\u274cCVE-2023-41991 - \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Security, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b\n\n\u274cCVE-2023-41992 - \u0431\u0440\u0435\u0448\u044c \u0432 Kernel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\n\u274cCVE-2023-41993 - \u0434\u044b\u0440\u0430 \u0432 WebKit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430\n\n\ud83d\udee0\u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b!\n\n#infosec #itnews #cve", "url": "https://t.me/ap_security/57"}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-41992", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "c7016838-a381-4c1b-953c-3eb5a5a52011", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-41992", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "031c4136-8116-4f25-b917-5ef0d84c10d7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": true, "value": "2023-09-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-41992", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-41992", "field": "evidence.0.details.added_date", "uuid": "031c4136-8116-4f25-b917-5ef0d84c10d7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": true, "value": "2023-09-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-41992", "field": "evidence.0.details.date_added", "uuid": "c7016838-a381-4c1b-953c-3eb5a5a52011", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-41992", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "c7016838-a381-4c1b-953c-3eb5a5a52011", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-41992", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "031c4136-8116-4f25-b917-5ef0d84c10d7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-41992", "field": "status.status_updated_at", "uuid": "c7016838-a381-4c1b-953c-3eb5a5a52011", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-41992", "field": "status.status_updated_at", "uuid": "031c4136-8116-4f25-b917-5ef0d84c10d7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-41992", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2023-41992 added to CISA KEV"}, {"timestamp": "2023-09-25T11:53:22Z", "date_only": false, "value": "2023-09-25T11:53:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4885", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "ffc9f36c-fecc-402d-95f7-5f344168e83d", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u043e\u043b\u044c \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Apple \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 0-day \u0432 \u041e\u0421 iPhone, iPad, Mac \u0438 Apple Watch.\n\n\u041a\u0430\u043a \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u0432 \u0441\u0432\u044f\u0437\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Citizen Lab \u0438 Google TAG, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-41991, CVE-2023-41992 \u0438 CVE-2023-41993 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e spyware Predator \u043e\u0442 Cytrox.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0441\u0442\u0430\u043b \u0435\u0433\u0438\u043f\u0435\u0442\u0441\u043a\u0438\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0410\u0445\u043c\u0435\u0434 \u0410\u043b\u044c\u0442\u0430\u043d\u0442\u0430\u0432\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0441\u044f \u0430\u0442\u0430\u043a\u0435 \u043f\u043e\u0447\u0442\u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0438 \u0441\u0432\u043e\u0435\u0439 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u0449\u0438\u0445 \u0432\u044b\u0431\u043e\u0440\u0430\u0445 \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0442\u043e\u044f\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438 \u0415\u0433\u0438\u043f\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u0435\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0410\u043b\u044c\u0442\u0430\u043d\u0442\u0430\u0432\u0438 \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u044b\u0432\u0430\u043b\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Cytrox spyware \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043a\u0430\u043a \u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u0440\u044f\u0434\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441 Facebook (\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u0432 \u0420\u0424 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u043e\u0439) \u0442\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0447\u0442\u043e Cytrox \u0438\u043c\u0435\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u0443 \u0432 \u0410\u0440\u043c\u0435\u043d\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438, \u041c\u0430\u0434\u0430\u0433\u0430\u0441\u043a\u0430\u0440\u0435, \u041e\u043c\u0430\u043d\u0435, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438 \u0438 \u0421\u0435\u0440\u0431\u0438\u0438.\n\nCitizen Lab \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u043c\u0430\u044f \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 SMS \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 WhatsApp, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u043a \u0441\u0435\u0442\u0438 Vodaphone Egypt \u0441 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0447\u0435\u0440\u0435\u0437  \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0431\u0435\u0437 HTTPS. \n\n\u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Safari \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2023-41991 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 CVE-2023- 41992 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Google TAG \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Predator \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Android \u0432 \u0415\u0433\u0438\u043f\u0442\u0435, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f CVE-2023-4762\u00a0\u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e 5 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u2014 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0434\u0435\u0442\u0430\u043b\u0438 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u044f\u0441\u043d\u044f\u0442\u044c \u043d\u0435 \u0441\u0442\u0430\u043b\u0438.\n\n\u0418 \u0431\u0435\u0437 \u0442\u043e\u0433\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u043e \u0447\u0442\u043e, \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0421\u0428\u0410 \u0432 \u0438\u044e\u043b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 Predator, Cytrox, \u0432 \u0441\u0432\u043e\u0439 \u0447\u0435\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a, \u0441\u0442\u0430\u043b\u0438 \u0432\u0434\u0440\u0443\u0433 \u043d\u0443\u0436\u043d\u044b \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0442\u0430\u043d\u0435\u0442 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0412\u0435\u0434\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0439 \u0441\u043a\u0430\u043d\u0434\u0430\u043b \u0441 Predator \u0432 \u0413\u0440\u0435\u0446\u0438\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043d\u0443\u044e \u043e\u0442\u0441\u0442\u0430\u0432\u043a\u0443 \u0434\u0432\u0443\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0430 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438. \u0422\u0435\u043f\u0435\u0440\u044c - \u0415\u0433\u0438\u043f\u0435\u0442.", "url": "https://t.me/true_secator/4885"}, {"timestamp": "2023-09-25T18:10:03Z", "date_only": false, "value": "2023-09-25T18:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "889a22e5-c4b2-47b7-81b2-df78e3d8cd92"}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "vulnerabilities.73.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "vulnerabilities.58.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-09-28T22:00:00Z", "date_only": false, "value": "2023-09-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": true, "value": "2023-10-16", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-41992", "field": "evidence.0.details.due_date", "uuid": "c7016838-a381-4c1b-953c-3eb5a5a52011", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-25T22:00:00Z", "date_only": false, "value": "2023-10-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-12-05T06:44:09Z", "date_only": false, "value": "2023-12-05T06:44:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/arpsyndicate/1413", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "c82e2d85-6495-49bc-a81b-1ed9c0595cec", "content": "#ExploitObserverAlert\n\nCVE-2023-41992\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-41992. The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\nFIRST-EPSS: 0.000920000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1413", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:20:45.267Z", "date_only": false, "value": "2023-12-13T01:20:45.267407Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-41992", "record": "GSD-2023-41992", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-10T22:03:38.115Z", "date_only": false, "value": "2024-01-10T22:03:38.115Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2023-41992", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-10T22:15:49.427Z", "date_only": false, "value": "2024-01-10T22:15:49.427", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-41992", "record": "GSD-2023-41992", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-01-22T23:00:00Z", "date_only": false, "value": "2024-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-01-22T23:00:00Z", "date_only": false, "value": "2024-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-08-15T17:58:46.274Z", "date_only": false, "value": "2024-08-15T17:58:46.274+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-10-21T16:49:20Z", "date_only": false, "value": "2024-10-21T16:49:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/freeosint/2030", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "046afd14-e3f2-4a3d-b6e3-2c65d3b3d6b8", "content": "Google: \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f iOS \u0438 Android \u043e\u0442 NSO. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Threat Analysis Group (TAG) \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 APT29: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u044f\u043a\u043e\u0431\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0420\u043e\u0441\u0441\u0438\u0435\u0439, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NSO Group \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iOS \u0438 Android.\n\u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u043f\u043e \u0438\u044e\u043b\u044c 2023-\u0433\u043e. \u041a \u0442\u043e\u043c\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438, \u043d\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0438 \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\nAPT29, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c Midnight Blizzard, \u0432 \u043f\u043e\u0448\u043b\u043e\u043c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430\u0441\u044c \u0430\u0442\u0430\u043a\u043e\u0439 \u043d\u0430 Microsoft, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0421\u0428\u0410. \u0422\u0435\u043f\u0435\u0440\u044c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0432\u0437\u044f\u043b\u0430\u0441\u044c \u0437\u0430 \u0432\u043b\u0430\u0441\u0442\u0438 \u041c\u043e\u043d\u0433\u043e\u043b\u0438\u0438.\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 Google Threat Analysis Group, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-41993, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e WebKit \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.\n\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0434\u044b\u0440\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0435\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430 CVE-2023-41991 \u0438 CVE-2023-41992.\n\u0412\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, APT29 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0430\u0439\u0442\u044b mfa.gov[.]mn \u0438 cabinet.gov[.]mn \u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u043a\u043e\u0434 \u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 iframe. \u0421\u0445\u0435\u043c\u0430 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u0430 \u0442\u0430\u043a:\n\u00a0\n\u0422\u0430\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c cookies \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 iPhone, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 16.6.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041e\u0421.\n\u0423\u0436\u0435 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u0442\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f CVE-2024-5274 \u0438 CVE-2024-4671, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Google Chrome, \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Android, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u0438 \u0441\u0430\u0439\u0442 mga.gov[.]mn.", "url": "https://t.me/freeosint/2030", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-24T20:35:18.305Z", "date_only": false, "value": "2024-12-24T20:35:18.305039Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971890", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "1d2eb92e-0fdd-4f12-a6a7-2ebaca6f3aad", "url": "https://feedsin.space/feed/CISAKevBot/items/2971890"}, {"timestamp": "2025-02-04T16:26:34.974Z", "date_only": false, "value": "2025-02-04T16:26:34.974088Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-41992", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T16:26:34.974Z", "date_only": false, "value": "2025-02-04T16:26:34.974088Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-41992", "record": "FKIE_CVE-2023-41992", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-14T10:00:28Z", "date_only": false, "value": "2025-02-14T10:00:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/a_zW9FEz1DxTGehYrth7qgkKMhEl_ZIvTIF0raOy5bV19wuY", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "0d401f5d-91e2-4fa4-b281-16fd47d2035d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-23T02:10:47Z", "date_only": false, "value": "2025-02-23T02:10:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "4aefc358-dc1b-4507-898c-89b08eaf9ad3"}, {"timestamp": "2025-04-13T22:00:00Z", "date_only": false, "value": "2025-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2025-04-13T22:00:00Z", "date_only": false, "value": "2025-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2025-04-13T22:00:00Z", "date_only": false, "value": "2025-04-13T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-04-14T08:21:12.074Z", "date_only": false, "value": "2025-04-14T08:21:12.074+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-05-16T18:07:09Z", "date_only": false, "value": "2025-05-16T18:07:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/anti_malware/20437", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "1c8e3ceb-82c8-4c57-b6ea-7aec8746514d", "content": "\u0413\u043b\u0430\u0432\u043d\u043e\u0435 \u0437\u0430 16 \u043c\u0430\u044f\n\n\u25aa\ufe0f \u041c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430 \u043d\u0430\u0447\u0430\u043b\u043e 2025 \u0433\u043e\u0434\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u043b\u0438 297 \u0442\u044b\u0441. \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u043a\u0440\u0430\u0436 \u2014 \u043e\u0431\u0449\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u0443\u0449\u0435\u0440\u0431\u0430 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0447\u0442\u0438 6,9 \u043c\u043b\u0440\u0434 \u0440\u0443\u0431\u043b\u0435\u0439.\n\n\u25aa\ufe0fChrome \u0434\u043b\u044f Android \u043d\u0430\u0443\u0447\u0438\u0442\u0441\u044f \u0441\u0430\u043c \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u0434\u044b 2FA \u0438\u0437 \u0421\u041c\u0421 \u2014 \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0440\u0430 Leopeva64, \u0432 Chrome \u0434\u043b\u044f Android \u0441\u043a\u043e\u0440\u043e \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043a\u043e\u0434\u043e\u0432 (OTP), \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u0421\u041c\u0421-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445, \u043f\u0440\u044f\u043c\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u25aa\ufe0f\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043a\u0443\u043f\u0438\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0438 \u043a\u043e\u043d\u0442\u0440\u0430\u0433\u0435\u043d\u0442\u043e\u0432 Coinbase Global \u0432 \u0418\u043d\u0434\u0438\u0438 \u0438 \u0441 \u0438\u0445 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0431\u0438\u0440\u0436\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u043a\u0443\u043f\u0430 \u0432 $20 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432.\n\n\u25aa\ufe0f \u041c\u0412\u0414 \u0438 \u0424\u0421\u0411 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0430\u0444\u0435\u0440\u044b \u0441 \u041f\u0443\u0448\u043a\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u043a\u0430\u0440\u0442\u0430\u043c\u0438 \u0432 \u0420\u044f\u0437\u0430\u043d\u0438 \u0438 \u041d\u043e\u0432\u043e\u0441\u0438\u0431\u0438\u0440\u0441\u043a\u0435\n\n\u25aa\ufe0f \u0412\u0441\u043f\u043b\u044b\u0432\u0448\u0438\u0439 PoC \u0432\u0435\u0440\u043d\u0443\u043b \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 iOS \u2014 CVE-2023-41992 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 https://www.anti-malware.ru/news", "url": "https://t.me/anti_malware/20437", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-21T23:05:37.306Z", "date_only": false, "value": "2025-10-21T23:05:37.306Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-41992", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T19:21:41.728Z", "date_only": false, "value": "2025-11-04T19:21:41.728Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T19:21:41.728Z", "date_only": false, "value": "2025-11-04T19:21:41.728Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-41992", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T21:30:39Z", "date_only": false, "value": "2025-11-04T21:30:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WCCH-RMXQ-7X86", "record": "GHSA-WCCH-RMXQ-7X86", "field": "modified", "linked_record": true}, {"timestamp": "2025-12-04T12:33:45.803Z", "date_only": false, "value": "2025-12-04T12:33:45.803543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m75y74vb7v2v", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "ad2b0763-4a45-4e7e-9dae-fa5ac1e5eeec", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m75y74vb7v2v"}, {"timestamp": "2026-02-02T12:26:49.927Z", "date_only": false, "value": "2026-02-02T12:26:49.927038Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c7016838-a381-4c1b-953c-3eb5a5a52011", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "4ae09787-014d-4d15-b61d-786546e5ffc4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c7016838-a381-4c1b-953c-3eb5a5a52011", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-03-06T09:17:19.595Z", "date_only": false, "value": "2026-03-06T09:17:19.595+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-06-17T06:23:13.257Z", "date_only": false, "value": "2026-06-17T06:23:13.257", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-41992", "record": "FKIE_CVE-2023-41992", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:48.317Z", "date_only": false, "value": "2026-06-19T12:46:48.317818Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59ab8901-182e-440d-9b8c-7649de88736d", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "319828b5-2c57-4217-8378-2df1c0c0cdbf", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59ab8901-182e-440d-9b8c-7649de88736d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-41992", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "031c4136-8116-4f25-b917-5ef0d84c10d7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:45.932Z", "date_only": false, "value": "2026-06-23T14:05:45.932991Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/031c4136-8116-4f25-b917-5ef0d84c10d7", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "78d0b139-49be-4269-80cb-1dc248d971a6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/031c4136-8116-4f25-b917-5ef0d84c10d7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:02:20.713Z", "date_only": false, "value": "2026-07-26T02:02:20.713010Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1993", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "6af7375c-c565-4d07-9d7b-caa69784cf1a", "content": "Apple \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0435\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 iPhone \u0438 Mac.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u044f\u0434\u0440\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 WebKit (CVE-2023-41993) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2023-41991). \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a (CVE-2023-41992) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 Kernel Framework, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 API \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438 \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 macOS 12.7/13.6, iOS 16.7/17.0.1, iPadOS 16.7/17.0.1 \u0438 watchOS 9.6.3/10.0.1 \u043f\u0443\u0442\u0435\u043c \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \n\n\u00abApple \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0433\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS \u0434\u043e iOS 16.7\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 iPhone8 \u0438 \u043d\u043e\u0432\u0435\u0435, iPad mini 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 Mac \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS Monterey \u0438 \u043d\u043e\u0432\u0435\u0435, Apple Watch Series 4 \u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Citizen Lab \u0432 \u0428\u043a\u043e\u043b\u0435 \u041c\u0443\u043d\u043a\u0430 \u043f\u0440\u0438 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0435 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u0438 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google.\n\n\u0425\u043e\u0442\u044f \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043c\u043d\u043e\u0433\u0438\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u044e\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Citizen Lab \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://support.apple.com/en-us/HT213926 \n\nhttps://support.apple.com/en-us/HT213931 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Apple", "url": "https://t.me/EchelonEyes/1993"}, {"timestamp": "2026-07-28T00:00:25.806Z", "date_only": false, "value": "2026-07-28T00:00:25.806855Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/1993", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "34da0c5c-df0e-476f-86e2-92fee64e3686", "content": "Apple \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0435\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 iPhone \u0438 Mac.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u044f\u0434\u0440\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 WebKit (CVE-2023-41993) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2023-41991). \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a (CVE-2023-41992) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 Kernel Framework, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 API \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438 \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \n\n\u041f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 macOS 12.7/13.6, iOS 16.7/17.0.1, iPadOS 16.7/17.0.1 \u0438 watchOS 9.6.3/10.0.1 \u043f\u0443\u0442\u0435\u043c \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \n\n\u00abApple \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0433\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS \u0434\u043e iOS 16.7\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 iPhone8 \u0438 \u043d\u043e\u0432\u0435\u0435, iPad mini 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 Mac \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS Monterey \u0438 \u043d\u043e\u0432\u0435\u0435, Apple Watch Series 4 \u0438 \u043d\u043e\u0432\u0435\u0435.\n\n\u0412\u0441\u0435 \u0442\u0440\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Citizen Lab \u0432 \u0428\u043a\u043e\u043b\u0435 \u041c\u0443\u043d\u043a\u0430 \u043f\u0440\u0438 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0435 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u0438 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google.\n\n\u0425\u043e\u0442\u044f \u0434\u0435\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043c\u043d\u043e\u0433\u0438\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u044e\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Citizen Lab \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://support.apple.com/en-us/HT213926 \n\nhttps://support.apple.com/en-us/HT213931 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Apple", "url": "https://t.me/EchelonEyes/1993", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-24T13:00:03.061Z", "date_only": false, "value": "2026-08-24T13:00:03.061702Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xhqcankao/6327", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "aeb788d7-c684-481c-b46b-43b3e0d734b3", "content": "Apple \u53d1\u5e03\u7d27\u6025\u5b89\u5168\u66f4\u65b0\uff0c\u4ee5\u4fee\u590d\u4e09\u4e2a\u65b0\u7684\u96f6\u65e5\u6f0f\u6d1e\n\nWebKit \u6d4f\u89c8\u5668\u5f15\u64ce (CVE-2023-41993) \u548c\u5b89\u5168\u6846\u67b6 (CVE-2023-41991) \u4e2d\u53d1\u73b0\u4e86\u4e24\u4e2a\u9519\u8bef\uff0c\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u4f7f\u7528\u6076\u610f\u5e94\u7528\u7a0b\u5e8f\u7ed5\u8fc7\u7b7e\u540d\u9a8c\u8bc1\u6216\u901a\u8fc7\u6076\u610f\u5236\u4f5c\u7684\u7f51\u9875\u83b7\u53d6\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6743\u9650\u3002\n\n\u7b2c\u4e09\u4e2a\u662f\u5728\u5185\u6838\u6846\u67b6\u4e2d\u627e\u5230\u7684\uff0c\u5b83\u63d0\u4f9b API \u4ee5\u53ca\u5bf9\u5185\u6838\u6269\u5c55\u548c\u5185\u6838\u9a7b\u7559\u8bbe\u5907\u9a71\u52a8\u7a0b\u5e8f\u7684\u652f\u6301\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u7f3a\u9677 (CVE-2023-41992) \u6765\u5347\u7ea7\u6743\u9650\u3002\n\nApple \u901a\u8fc7\u89e3\u51b3\u8bc1\u4e66\u9a8c\u8bc1\u95ee\u9898\u548c\u6539\u8fdb\u68c0\u67e5\uff0c\u4fee\u590d\u4e86 macOS 12.7/13.6\u3001iOS 16.7/17.0.1\u3001iPadOS 16.7/17.0.1 \u548c watchOS 9.6.3/10.0.1 \u4e2d\u7684\u4e09\u4e2a\u96f6\u65e5\u9519\u8bef\u3002\n\n\u8be5\u516c\u53f8\u5728\u63cf\u8ff0\u5b89\u5168\u6f0f\u6d1e\u7684\u5b89\u5168\u516c\u544a\u4e2d\u900f\u9732\uff0c\u201c\u82f9\u679c\u516c\u53f8\u4e86\u89e3\u5230\u4e00\u4efd\u62a5\u544a\u79f0\uff0ciOS 16.7 \u4e4b\u524d\u7684 iOS \u7248\u672c\u53ef\u80fd\u5df2\u79ef\u6781\u5229\u7528\u6b64\u95ee\u9898\u3002\u201d\n\n\u8fd9\u4e09\u4e2a\u96f6\u65e5\u6f0f\u6d1e\u5747\u7531\u591a\u4f26\u591a\u5927\u5b66\u8292\u514b\u5b66\u9662\u516c\u6c11\u5b9e\u9a8c\u5ba4\u7684 Bill Marczak \u548c Google \u5a01\u80c1\u5206\u6790\u5c0f\u7ec4\u7684 Maddie Stone \u53d1\u73b0\u5e76\u62a5\u544a\u3002\n\n\u867d\u7136\u82f9\u679c\u5c1a\u672a\u63d0\u4f9b\u6709\u5173\u6f0f\u6d1e\u5229\u7528\u7684\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\uff0c\u4f46\u516c\u6c11\u5b9e\u9a8c\u5ba4\u548c\u8c37\u6b4c\u5a01\u80c1\u5206\u6790\u5c0f\u7ec4\u7684\u5b89\u5168\u7814\u7a76\u4eba\u5458\u7ecf\u5e38\u62ab\u9732\u96f6\u65e5\u6f0f\u6d1e\uff0c\u8fd9\u4e9b\u6f0f\u6d1e\u88ab\u6ee5\u7528\u5728\u9488\u5bf9\u9ad8\u98ce\u9669\u4e2a\u4eba\u7684\u6709\u9488\u5bf9\u6027\u7684\u95f4\u8c0d\u8f6f\u4ef6\u653b\u51fb\u4e2d\uff0c\u5176\u4e2d\u5305\u62ec\u8bb0\u8005\u3001\u53cd\u5bf9\u6d3e\u653f\u5ba2\u3001\u548c\u6301\u4e0d\u540c\u653f\u89c1\u8005\u3002\n\n\u2014\u2014 BleepingComputer", "url": "https://t.me/xhqcankao/6327"}, {"timestamp": "2026-08-25T00:00:23.553Z", "date_only": false, "value": "2026-08-25T00:00:23.553583Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xhqcankao/6327", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "fe601877-4e3b-470c-a60a-413c2e43b4ab", "content": "Apple \u53d1\u5e03\u7d27\u6025\u5b89\u5168\u66f4\u65b0\uff0c\u4ee5\u4fee\u590d\u4e09\u4e2a\u65b0\u7684\u96f6\u65e5\u6f0f\u6d1e\n\nWebKit \u6d4f\u89c8\u5668\u5f15\u64ce (CVE-2023-41993) \u548c\u5b89\u5168\u6846\u67b6 (CVE-2023-41991) \u4e2d\u53d1\u73b0\u4e86\u4e24\u4e2a\u9519\u8bef\uff0c\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u4f7f\u7528\u6076\u610f\u5e94\u7528\u7a0b\u5e8f\u7ed5\u8fc7\u7b7e\u540d\u9a8c\u8bc1\u6216\u901a\u8fc7\u6076\u610f\u5236\u4f5c\u7684\u7f51\u9875\u83b7\u53d6\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6743\u9650\u3002\n\n\u7b2c\u4e09\u4e2a\u662f\u5728\u5185\u6838\u6846\u67b6\u4e2d\u627e\u5230\u7684\uff0c\u5b83\u63d0\u4f9b API \u4ee5\u53ca\u5bf9\u5185\u6838\u6269\u5c55\u548c\u5185\u6838\u9a7b\u7559\u8bbe\u5907\u9a71\u52a8\u7a0b\u5e8f\u7684\u652f\u6301\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u7f3a\u9677 (CVE-2023-41992) \u6765\u5347\u7ea7\u6743\u9650\u3002\n\nApple \u901a\u8fc7\u89e3\u51b3\u8bc1\u4e66\u9a8c\u8bc1\u95ee\u9898\u548c\u6539\u8fdb\u68c0\u67e5\uff0c\u4fee\u590d\u4e86 macOS 12.7/13.6\u3001iOS 16.7/17.0.1\u3001iPadOS 16.7/17.0.1 \u548c watchOS 9.6.3/10.0.1 \u4e2d\u7684\u4e09\u4e2a\u96f6\u65e5\u9519\u8bef\u3002\n\n\u8be5\u516c\u53f8\u5728\u63cf\u8ff0\u5b89\u5168\u6f0f\u6d1e\u7684\u5b89\u5168\u516c\u544a\u4e2d\u900f\u9732\uff0c\u201c\u82f9\u679c\u516c\u53f8\u4e86\u89e3\u5230\u4e00\u4efd\u62a5\u544a\u79f0\uff0ciOS 16.7 \u4e4b\u524d\u7684 iOS \u7248\u672c\u53ef\u80fd\u5df2\u79ef\u6781\u5229\u7528\u6b64\u95ee\u9898\u3002\u201d\n\n\u8fd9\u4e09\u4e2a\u96f6\u65e5\u6f0f\u6d1e\u5747\u7531\u591a\u4f26\u591a\u5927\u5b66\u8292\u514b\u5b66\u9662\u516c\u6c11\u5b9e\u9a8c\u5ba4\u7684 Bill Marczak \u548c Google \u5a01\u80c1\u5206\u6790\u5c0f\u7ec4\u7684 Maddie Stone \u53d1\u73b0\u5e76\u62a5\u544a\u3002\n\n\u867d\u7136\u82f9\u679c\u5c1a\u672a\u63d0\u4f9b\u6709\u5173\u6f0f\u6d1e\u5229\u7528\u7684\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\uff0c\u4f46\u516c\u6c11\u5b9e\u9a8c\u5ba4\u548c\u8c37\u6b4c\u5a01\u80c1\u5206\u6790\u5c0f\u7ec4\u7684\u5b89\u5168\u7814\u7a76\u4eba\u5458\u7ecf\u5e38\u62ab\u9732\u96f6\u65e5\u6f0f\u6d1e\uff0c\u8fd9\u4e9b\u6f0f\u6d1e\u88ab\u6ee5\u7528\u5728\u9488\u5bf9\u9ad8\u98ce\u9669\u4e2a\u4eba\u7684\u6709\u9488\u5bf9\u6027\u7684\u95f4\u8c0d\u8f6f\u4ef6\u653b\u51fb\u4e2d\uff0c\u5176\u4e2d\u5305\u62ec\u8bb0\u8005\u3001\u53cd\u5bf9\u6d3e\u653f\u5ba2\u3001\u548c\u6301\u4e0d\u540c\u653f\u89c1\u8005\u3002\n\n\u2014\u2014 BleepingComputer", "url": "https://t.me/xhqcankao/6327", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:07.482Z", "date_only": false, "value": "2026-09-01T17:00:07.482328Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/848", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "2ad0bddf-f620-4393-9a4f-87454bd7098d", "content": "\u041d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google (TAG) \u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 The Citizen Lab \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0434\u043b\u044f iPhone. \u042d\u0442\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0434\u0435\u043e\u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Intellexa, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0442\u0430\u0439\u043d\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Predator \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0412 \u043e\u0442\u0432\u0435\u0442 Apple \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 iOS 16.7 \u0438 iOS 17.0.1 \u043a\u0430\u043a CVE-2023-41991, CVE-2023-41992, CVE-2023-41993. \u042d\u0442\u043e \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0442 Apple \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u043b\u0443\u0447\u0448\u0435 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438 \u043c\u044b \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u043c \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iOS \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. https://blog.google/threat-analysis-group/0-days-exploited-by-commercial-surveillance-vendor-in-egypt/", "url": "https://t.me/Hackme_news/848"}, {"timestamp": "2026-09-01T17:00:07.592Z", "date_only": false, "value": "2026-09-01T17:00:07.592724Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/843", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "51bdf99b-27f4-42e5-9999-5a9db32273fd", "content": "\ud83d\udea8\u0412\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438! Apple \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0442\u0440\u0435\u0445 \u043d\u043e\u0432\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 #iOS , iPadOS, macOS, watchOS \u0438 Safari.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439:\n\nCVE-2023-41991 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438.\nCVE-2023-41992 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\nCVE-2023-41993 \u2014 \u043e\u0448\u0438\u0431\u043a\u0430 WebKit, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.", "url": "https://t.me/Hackme_news/843"}, {"timestamp": "2026-09-02T05:00:04.975Z", "date_only": false, "value": "2026-09-02T05:00:04.975507Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "1bc21465-beaf-463a-b078-a0fcb1b987a4"}, {"timestamp": "2026-09-03T00:00:43.706Z", "date_only": false, "value": "2026-09-03T00:00:43.706634Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "65ebb1f2-3ec6-49af-9325-00422d6c6c38", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-41992", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "c7016838-a381-4c1b-953c-3eb5a5a52011", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T10:57:19.265Z", "anchors": {"origin": {"timestamp": "2023-09-21T18:23:49.779Z", "date_only": false, "value": "2023-09-21T18:23:49.779Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-09-21T18:23:49.779Z", "date_only": false, "value": "2023-09-21T18:23:49.779Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-05-16T18:07:09Z", "date_only": false, "value": "2025-05-16T18:07:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/anti_malware/20437", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "1c8e3ceb-82c8-4c57-b6ea-7aec8746514d", "content": "\u0413\u043b\u0430\u0432\u043d\u043e\u0435 \u0437\u0430 16 \u043c\u0430\u044f\n\n\u25aa\ufe0f \u041c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430 \u043d\u0430\u0447\u0430\u043b\u043e 2025 \u0433\u043e\u0434\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u043b\u0438 297 \u0442\u044b\u0441. \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u043a\u0440\u0430\u0436 \u2014 \u043e\u0431\u0449\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u0443\u0449\u0435\u0440\u0431\u0430 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0447\u0442\u0438 6,9 \u043c\u043b\u0440\u0434 \u0440\u0443\u0431\u043b\u0435\u0439.\n\n\u25aa\ufe0fChrome \u0434\u043b\u044f Android \u043d\u0430\u0443\u0447\u0438\u0442\u0441\u044f \u0441\u0430\u043c \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u0434\u044b 2FA \u0438\u0437 \u0421\u041c\u0421 \u2014 \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0440\u0430 Leopeva64, \u0432 Chrome \u0434\u043b\u044f Android \u0441\u043a\u043e\u0440\u043e \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043a\u043e\u0434\u043e\u0432 (OTP), \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u0421\u041c\u0421-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445, \u043f\u0440\u044f\u043c\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u25aa\ufe0f\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043a\u0443\u043f\u0438\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0438 \u043a\u043e\u043d\u0442\u0440\u0430\u0433\u0435\u043d\u0442\u043e\u0432 Coinbase Global \u0432 \u0418\u043d\u0434\u0438\u0438 \u0438 \u0441 \u0438\u0445 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0431\u0438\u0440\u0436\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u043a\u0443\u043f\u0430 \u0432 $20 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432.\n\n\u25aa\ufe0f \u041c\u0412\u0414 \u0438 \u0424\u0421\u0411 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0430\u0444\u0435\u0440\u044b \u0441 \u041f\u0443\u0448\u043a\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u043a\u0430\u0440\u0442\u0430\u043c\u0438 \u0432 \u0420\u044f\u0437\u0430\u043d\u0438 \u0438 \u041d\u043e\u0432\u043e\u0441\u0438\u0431\u0438\u0440\u0441\u043a\u0435\n\n\u25aa\ufe0f \u0412\u0441\u043f\u043b\u044b\u0432\u0448\u0438\u0439 PoC \u0432\u0435\u0440\u043d\u0443\u043b \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 iOS \u2014 CVE-2023-41992 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 https://www.anti-malware.ru/news", "url": "https://t.me/anti_malware/20437", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-09-21T22:30:38Z", "date_only": false, "value": "2023-09-21T22:30:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/70916", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "6370decb-1b34-44b4-9d30-7ef750a151ea", "content": "\u203c CVE-2023-41992 \u203c\n\nThe issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS 17.0.1 and iPadOS 17.0.1, watchOS 9.6.3, macOS Ventura 13.6, macOS Monterey 12.7, watchOS 10.0.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70916", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 14808.221, "hours": 4.113394722222222, "days": 0.17139144675925924, "min_seconds": 14808.221, "max_seconds": 14808.221, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-21T18:23:49.779Z", "date_only": false, "value": "2023-09-21T18:23:49.779Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-09-21T22:30:38Z", "date_only": false, "value": "2023-09-21T22:30:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/70916", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "6370decb-1b34-44b4-9d30-7ef750a151ea", "content": "\u203c CVE-2023-41992 \u203c\n\nThe issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS 17.0.1 and iPadOS 17.0.1, watchOS 9.6.3, macOS Ventura 13.6, macOS Monterey 12.7, watchOS 10.0.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70916", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 14808.221, "hours": 4.113394722222222, "days": 0.17139144675925924, "min_seconds": 14808.221, "max_seconds": 14808.221, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-21T18:23:49.779Z", "date_only": false, "value": "2023-09-21T18:23:49.779Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-09-21T22:30:38Z", "date_only": false, "value": "2023-09-21T22:30:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/70916", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "6370decb-1b34-44b4-9d30-7ef750a151ea", "content": "\u203c CVE-2023-41992 \u203c\n\nThe issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS 17.0.1 and iPadOS 17.0.1, watchOS 9.6.3, macOS Ventura 13.6, macOS Monterey 12.7, watchOS 10.0.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70916", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 52098199.221, "hours": 14471.722005833333, "days": 602.9884169097222, "min_seconds": 52098199.221, "max_seconds": 52098199.221, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-21T18:23:49.779Z", "date_only": false, "value": "2023-09-21T18:23:49.779Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-16T18:07:09Z", "date_only": false, "value": "2025-05-16T18:07:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/anti_malware/20437", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "1c8e3ceb-82c8-4c57-b6ea-7aec8746514d", "content": "\u0413\u043b\u0430\u0432\u043d\u043e\u0435 \u0437\u0430 16 \u043c\u0430\u044f\n\n\u25aa\ufe0f \u041c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430 \u043d\u0430\u0447\u0430\u043b\u043e 2025 \u0433\u043e\u0434\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u043b\u0438 297 \u0442\u044b\u0441. \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u043a\u0440\u0430\u0436 \u2014 \u043e\u0431\u0449\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u0443\u0449\u0435\u0440\u0431\u0430 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0447\u0442\u0438 6,9 \u043c\u043b\u0440\u0434 \u0440\u0443\u0431\u043b\u0435\u0439.\n\n\u25aa\ufe0fChrome \u0434\u043b\u044f Android \u043d\u0430\u0443\u0447\u0438\u0442\u0441\u044f \u0441\u0430\u043c \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u0434\u044b 2FA \u0438\u0437 \u0421\u041c\u0421 \u2014 \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0440\u0430 Leopeva64, \u0432 Chrome \u0434\u043b\u044f Android \u0441\u043a\u043e\u0440\u043e \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043a\u043e\u0434\u043e\u0432 (OTP), \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u0421\u041c\u0421-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445, \u043f\u0440\u044f\u043c\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u25aa\ufe0f\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043a\u0443\u043f\u0438\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0438 \u043a\u043e\u043d\u0442\u0440\u0430\u0433\u0435\u043d\u0442\u043e\u0432 Coinbase Global \u0432 \u0418\u043d\u0434\u0438\u0438 \u0438 \u0441 \u0438\u0445 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0431\u0438\u0440\u0436\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u043a\u0443\u043f\u0430 \u0432 $20 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432.\n\n\u25aa\ufe0f \u041c\u0412\u0414 \u0438 \u0424\u0421\u0411 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0430\u0444\u0435\u0440\u044b \u0441 \u041f\u0443\u0448\u043a\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u043a\u0430\u0440\u0442\u0430\u043c\u0438 \u0432 \u0420\u044f\u0437\u0430\u043d\u0438 \u0438 \u041d\u043e\u0432\u043e\u0441\u0438\u0431\u0438\u0440\u0441\u043a\u0435\n\n\u25aa\ufe0f \u0412\u0441\u043f\u043b\u044b\u0432\u0448\u0438\u0439 PoC \u0432\u0435\u0440\u043d\u0443\u043b \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 iOS \u2014 CVE-2023-41992 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 https://www.anti-malware.ru/news", "url": "https://t.me/anti_malware/20437", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 99419609.486449, "hours": 27616.55819068028, "days": 1150.6899246116782, "min_seconds": 99419609.486449, "max_seconds": 99419609.486449, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-21T18:23:49.779Z", "date_only": false, "value": "2023-09-21T18:23:49.779Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-41992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T10:57:19.265Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 99404801.265449, "hours": 27612.444795958058, "days": 1150.518533164919, "min_seconds": 99404801.265449, "max_seconds": 99404801.265449, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-21T22:30:38Z", "date_only": false, "value": "2023-09-21T22:30:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/70916", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "6370decb-1b34-44b4-9d30-7ef750a151ea", "content": "\u203c CVE-2023-41992 \u203c\n\nThe issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS 17.0.1 and iPadOS 17.0.1, watchOS 9.6.3, macOS Ventura 13.6, macOS Monterey 12.7, watchOS 10.0.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70916", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T10:57:19.265Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 47321410.265449, "hours": 13144.836184846945, "days": 547.7015077019561, "min_seconds": 47321410.265449, "max_seconds": 47321410.265449, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-16T18:07:09Z", "date_only": false, "value": "2025-05-16T18:07:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/anti_malware/20437", "record": "CVE-2023-41992", "field": "creation_timestamp", "uuid": "1c8e3ceb-82c8-4c57-b6ea-7aec8746514d", "content": "\u0413\u043b\u0430\u0432\u043d\u043e\u0435 \u0437\u0430 16 \u043c\u0430\u044f\n\n\u25aa\ufe0f \u041c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430 \u043d\u0430\u0447\u0430\u043b\u043e 2025 \u0433\u043e\u0434\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u043b\u0438 297 \u0442\u044b\u0441. \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u043a\u0440\u0430\u0436 \u2014 \u043e\u0431\u0449\u0430\u044f \u0441\u0443\u043c\u043c\u0430 \u0443\u0449\u0435\u0440\u0431\u0430 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0447\u0442\u0438 6,9 \u043c\u043b\u0440\u0434 \u0440\u0443\u0431\u043b\u0435\u0439.\n\n\u25aa\ufe0fChrome \u0434\u043b\u044f Android \u043d\u0430\u0443\u0447\u0438\u0442\u0441\u044f \u0441\u0430\u043c \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u0434\u044b 2FA \u0438\u0437 \u0421\u041c\u0421 \u2014 \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0440\u0430 Leopeva64, \u0432 Chrome \u0434\u043b\u044f Android \u0441\u043a\u043e\u0440\u043e \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0445 \u043a\u043e\u0434\u043e\u0432 (OTP), \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u0421\u041c\u0421-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445, \u043f\u0440\u044f\u043c\u043e \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u25aa\ufe0f\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043a\u0443\u043f\u0438\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0438 \u043a\u043e\u043d\u0442\u0440\u0430\u0433\u0435\u043d\u0442\u043e\u0432 Coinbase Global \u0432 \u0418\u043d\u0434\u0438\u0438 \u0438 \u0441 \u0438\u0445 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0431\u0438\u0440\u0436\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u043a\u0443\u043f\u0430 \u0432 $20 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432.\n\n\u25aa\ufe0f \u041c\u0412\u0414 \u0438 \u0424\u0421\u0411 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0430\u0444\u0435\u0440\u044b \u0441 \u041f\u0443\u0448\u043a\u0438\u043d\u0441\u043a\u0438\u043c\u0438 \u043a\u0430\u0440\u0442\u0430\u043c\u0438 \u0432 \u0420\u044f\u0437\u0430\u043d\u0438 \u0438 \u041d\u043e\u0432\u043e\u0441\u0438\u0431\u0438\u0440\u0441\u043a\u0435\n\n\u25aa\ufe0f \u0412\u0441\u043f\u043b\u044b\u0432\u0448\u0438\u0439 PoC \u0432\u0435\u0440\u043d\u0443\u043b \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 iOS \u2014 CVE-2023-41992 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0411\u043e\u043b\u044c\u0448\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043d\u0430 https://www.anti-malware.ru/news", "url": "https://t.me/anti_malware/20437", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T10:57:19.265Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}