CVE-2023-41991

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Sep 21, 2023
Updated: Jun 21, 2024
CWE ID 295

Summary

CVE-2023-41991 is a certificate validation issue that has been addressed in macOS Ventura 13.6, iOS 16.7, and iPadOS 16.7. Malicious apps could potentially bypass signature validation, posing a security risk. Apple has reported that this vulnerability may have been actively exploited on earlier versions of iOS. This issue has been resolved in the latest updates.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apple (iPhone OS)
  • iPadOS
  • MacOS

Affected Vendors

  • Apple

Advisories, Assessments, and Mitigations