VulnRadar

Data against noise.

Built with NaN
Page generated: 11 Nov 2026, 09:34 UTC
← Dashboard

CVE-2025-43510

DarkSword

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application m…

Read full description
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpected changes in memory shared between processes.
CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
3.5/10
REALITY · THREAT PRIORITY
8.2/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 7.8: +1.17
  • Fresh EPSS: 0.36%: +0.00

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 32 documents and public datasets.

Hype components

Headline sample (25%)
30/100
Press, 30 days (60%)
20/100
Grounded branding (15%)
100/100
HYPE TOTAL34/100

Sources and documents

Pasquale Pillitteri
Press · 02 Nov 2026, 09:21 · Instagram Ad Delivers DarkSword Spyware to iPhones Running Outdated iOS - Pasquale Pillitteri
CyberSecurityNews
Press · 29 Oct 2026, 07:00 · Hackers Use Zero-Click Coruna and DarkSword Exploits to Steal Sensitive Data From iPhones - CyberSecurityNews
Fox News
Press · 19 Oct 2026, 07:00 · New iPhone spyware can steal passwords and photos - Fox News
The Hacker News
Press · 11 Oct 2026, 07:00 · P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands - The Hacker News
iVerify
Press · 08 Oct 2026, 07:00 · Sleep, Beacon, Steal, Repeat - The Story of P7 DarkSword Variant - iVerify
See all 32 source documents
9to5Mac
Press · 08 Oct 2026, 07:00 · Researchers uncover new DarkSword spyware variant affecting unpatched iPhones - 9to5Mac
Dark Reading
Press · 10 Aug 2026, 07:00 · Coruna, DarkSword iOS Exploits Proliferate Globally - Dark Reading
The Hacker News
Press · 03 Aug 2026, 07:00 · Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS - The Hacker News
Bitdefender
Press · 24 Apr 2026, 07:00 · ‘Update iOS to Protect Your Data’ – Apple Urges Users to Patch Against Coruna and DarkSword Exploits - Bitdefender
Kaspersky
Press · 17 Apr 2026, 07:00 · Hackers leverage leaked government intelligence tools to target everyday iOS users - Kaspersky
Malwarebytes
Press · 02 Apr 2026, 07:00 · Apple expands “DarkSword” patches to iOS 18.7.7 - Malwarebytes
BleepingComputer
Press · 01 Apr 2026, 07:00 · Apple expands iOS 18 updates to more iPhones to block DarkSword attacks - BleepingComputer
CNET
Press · 31 Mar 2026, 07:00 · Leaked DarkSword iPhone Hack Is ‘Extremely Worrisome.’ How to Secure Your Phone Now - CNET
Lookout
Press · 25 Mar 2026, 07:00 · WebKit and Kernel Vulnerabilities and DarkSword Exploit | Threat Intel - Lookout
Mashable
Press · 24 Mar 2026, 16:47 · iPhone exploit DarkSword has been released in the wild: How to protect yourself - Mashable
BleepingComputer
Press · 23 Mar 2026, 07:00 · CISA orders feds to patch DarkSword iOS flaws exploited attacks - BleepingComputer
The Hacker News
Press · 21 Mar 2026, 07:00 · CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Orders Patching by April 3, 2026 - The Hacker News
Cyber Magazine
Press · 20 Mar 2026, 07:00 · DarkSword Spyware: Is Your iPhone Watching You? - Cyber Magazine
PCMag
Press · 19 Mar 2026, 07:00 · Update Your iPhone Now: New 'DarkSword' Hack Targets Older iOS 18 Versions - PCMag
Malwarebytes
Press · 19 Mar 2026, 07:00 · [updated] A DarkSword hangs over unpatched iPhones - Malwarebytes
Zimperium
Press · 19 Mar 2026, 07:00 · DarkSword: The Hit-and-Run Successor to the Coruna iOS Exploit Kit - Zimperium
9to5Mac
Press · 19 Mar 2026, 07:00 · Google reveals another exploit chain affecting outdated iPhones - 9to5Mac
The Hacker News
Press · 19 Mar 2026, 07:00 · DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover - The Hacker News
Help Net Security
Press · 19 Mar 2026, 07:00 · DarkSword: Researchers uncover another iOS exploit kit - Help Net Security
Security Affairs
Press · 19 Mar 2026, 07:00 · DarkSword emerges as powerful iOS exploit tool in global attacks - Security Affairs
iVerify
Press · 18 Mar 2026, 07:00 · Inside DarkSword: A New iOS Exploit Kit Delivered Via Compromised Legitimate Websites - iVerify
Dark Reading
Press · 18 Mar 2026, 07:00 · DarkSword: iPhone Exploit Kit Serves Spies & Thieves Alike - Dark Reading
Lookout
Press · 18 Mar 2026, 07:00 · Attackers Wielding DarkSword Threaten iOS Users | Threat Intel - Lookout
Google Cloud
Press · 18 Mar 2026, 07:00 · The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors - Google Cloud
Lookout
Press · 18 Mar 2026, 07:00 · Lookout Uncovers DarkSword iOS Exploit Chain, Exposing a New Era of Mobile Threats - Lookout
SecurityWeek
Press · 18 Mar 2026, 07:00 · ‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors - SecurityWeek
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 05 Nov 2025, 08:00 · Apple Products Multiple Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

024681002 Nov 2026 · OBSERVED EXPLOITATION + LOWER RECENT ATTENTIONHype 0.0Reality 8.202 Nov 2026 · OBSERVED EXPLOITATION + LOWER RECENT ATTENTIONHype 4.3Reality 8.202 Nov 2026 · OBSERVED EXPLOITATION + LOWER RECENT ATTENTIONHype 4.0Reality 8.208 Nov 2026 · OBSERVED EXPLOITATION + LOWER RECENT ATTENTIONHype 3.5Reality 8.2Nov 2Nov 2Nov 2Nov 8

━ Hype Score (Perceived)  ━ Reality threat priority. Definition changes are not new attacks.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 7.8; EPSS 0.4%
Attention, last 30 days
3 distinct story titles; 3 press documents; 1 publisher domains.
Technical potential
local access, no prior privileges, user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-08 11:44:14.723268+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
05 Nov 2025, 08:00
Published
12 Dec 2025, 20:56
Added to the CISA KEV catalog
20 Mar 2026, 00:00
Latest press mention
02 Nov 2026, 09:21
Score calculated
08 Nov 2026, 11:44
Name
DarkSword
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar