← Back to browse · API

CVE-2023-41991

Severity
MEDIUM
CVSS
5.5
EPSS
0.04547
Risk score
48.59
CISA KEV
Yes
PoC
No
Published
2023-09-21
Modified
2025-11-04
First seen
2026-08-07
Aliases
EUVD-2023-46450, GHSA-FJ3M-2R8F-M4X9
Products
Apple:Multiple Products, Apple:iOS and iPadOS unspecified <16.7, Apple:macOS unspecified <13.6
Sources
cisa.gov CVE-2023-41991
euvd EUVD-2023-46450

Description

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

References