CVE-2023-32434

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero
Triaged: Feb. 18, 2026 23 articles

EPSS Score

Source: FIRST.org · 2026-05-24
53.99%
probability
This CVE has a 53.99% probability of being exploited in the next 30 days.
0% Top 98.0th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero
Integer overflow in the XNU kernel

Attack Intelligence

Google Project Zero

Patched
June 21, 2023
Reported by
Georgy Kucherin (@kucher1n), Leonid Bezvershenko (@bzvr_), and Boris Larin (@oct0xor) of Kaspersky
Root Cause Analysis
???

Signal Intelligence

Confidence
92%
EPSS 53.99%
Mentions 23
Last Seen Mar 12, 2026

CNA Information

Analyst Note

This CVE is confirmed as actively exploited in the wild with kernel-level privilege escalation capability (CVSS 7.8 HIGH). Google Project Zero attribution, multiple coordinated Apple security patches across iOS/macOS/watchOS platforms, and media reports of 'extremely sophisticated' attacks provide strong corroboration of active exploitation.

Threat Actors 2

Kimsuky
apt_group Information theft and espionage 🇰🇷 KR
Operation Triangulation
apt_group Information theft and espionage 🇷🇺 RU

Triage Info

Decided atFeb 18, 2026