VULNERABILITY INTELLIGENCE

CVE-2023-41991

CVSS score5.5 MEDIUM
EPSS probability13.38%
CISA KEVKnown exploited vulnerability
Published2023-09-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Known Exploited Vulnerability

Apple Multiple Products Improper Certificate Validation Vulnerability

Vendor / product: Apple / Multiple Products

Description

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Weakness classification

  • nvd@nist.gov: CWE-295
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-295

Primary references