CVE-2023-41061

CVSS 7.8 HIGHEPSS 3.2%● KEVCWE-20

Vexday Risk Score

51Attention

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

CVSS 7.8EPSS 3.2%KEV simPoC —Nuclei —Metasploit —Patch —

Lifecycle

07 Sep 2023Published on NVD

11 Sep 2023Active exploitation (CISA KEV)

Recommendation: Patch as soon as possible — active exploitation confirmed.

In short

A flaw in how Apple devices validate attachments allows attackers to run malicious code by sending a specially crafted file. This is dangerous because it can give attackers full control of your device without you needing to do anything except receive the attachment.

Technical detail

A validation bypass in attachment handling (CWE-20) permits arbitrary code execution when a specially crafted attachment is processed. The vulnerability affects iOS, iPadOS, and watchOS; exploitation requires delivery of a malicious attachment and has been observed in active attacks. Fixed in iOS 16.6.1, iPadOS 16.6.1, and watchOS 9.6.2.

Summary generated and translated by AI from the official description.

A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Apple · iOS and iPadOS Apple · watchOS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://seclists.org/fulldisclosure/2023/Sep/4 http://seclists.org/fulldisclosure/2023/Sep/5 https://support.apple.com/en-us/HT213905 https://support.apple.com/en-us/HT213907 https://support.apple.com/kb/HT213905 https://support.apple.com/kb/HT213907 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41061