CVE-2023-41061

No fix known ExploitedEPSS 4%CVSS 7.8

A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Published 2023-09-07 · In CISA KEV since 2023-09-11 · CVE record · OSV

Products: Apple iOS and iPadOS, Apple watchOS, apple ipados, apple iphone_os