Exploitation Summary
CVE-2023-41974 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 5, 2026. EIP tracks 1 public exploit.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-41974, leveraging a path traversal vulnerability in Apple's mobile backup system to achieve arbitrary file write and potential local privilege escalation (LPE) on iOS devices. The exploit uses the MobileBackup2 service to manipulate backup/restore operations for unauthorized file access.
Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.
Exploits (1)
This repository contains a functional exploit for CVE-2023-41974, leveraging a path traversal vulnerability in Apple's mobile backup system to achieve arbitrary file write and potential local privilege escalation (LPE) on iOS devices. The exploit uses the MobileBackup2 service to manipulate backup/restore operations for unauthorized file access.
References (6)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H