CVE-2023-38606: Apple Multiple Products Kernel Unspecified Vulnerability.

Apple Multiple Products Kernel Unspecified Vulnerability. Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.

• CISA KEV-listed (remediation due 2023-08-16)
• EPSS 2.9% (85.6% percentile)
• CVSS 5.5 medium

Related briefings

• Operation Triangulation: Four Zero-Days Including Undocumented GPU CoreSight MMIO Hardware Feature Used to Bypass Apple PPL in Most Sophisticated iOS Attack Chain Ever Analyzed 2026-02-16

Linked threat actors

• Operation Triangulation

Browse the CVE database

Read the full analysis on IntelFusions