Topic

Ios Exploit

Coverage tagged ios exploit.

Articles: 1
Desk: 1

Data graphic: the DarkSword iOS 18 exploit chain uses 6 vulnerabilities, drawn as a flow from one Safari visit through JavaScriptCore CVE-2025-31277, CVE-2025-43529 , ANGLE CVE-2025-14174 , dyld CVE-2026-20700 and the XNU kernel CVE-2025-43510 / 43520 to data exfiltrated in minutes, with each flaw's reported patch band. It affects iOS 18.4 to 18.7, has no persistence a reboot clears the chain , is used by UNC6353, UNC6748 and PARS Defense, and the advice is to patch to iOS 26.3 or newer at least 18.7.3 on 18.x and enforce Lockdown Mode for high-risk users.

stableResearch Ios Exploit

DarkSword: Pure-JavaScript iOS 18 Watering-Hole Full Chain Used by Multiple Actors

The chain moves from Safari RCE through sandbox escape to kernel read/write, exfiltrates data within minutes, then cleans up and exits with no user interaction.

Jul 15 · 8 min