Apple · Multiple Products
CVE-2023-41991
Apple Multiple Products Improper Certificate Validation Vulnerability
Was es ist
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
CISA: Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.
Was zu tun ist
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Frist für US-Bundesbehörden: 16. Oktober 2023
Weitere ausgenutzte Schwachstellen von Apple
| Hinzugefügt | Schwachstelle | Produkt | Schweregrad | Angriffswahrscheinlichkeit |
|---|---|---|---|---|
| 29.09.2026 | Out-of-Bounds Write | Multiple Products | Hoch 8,8 | 26% |
| 20.03.2026 | Buffer Overflow | Multiple Products | Hoch 8,8 | 1,7% |
| 20.03.2026 | Improper Locking | Multiple Products | Hoch 7,8 | 0,4% |
| 20.03.2026 | Classic Buffer Overflow | Multiple Products | Mittel 5,5 | 0,4% |
| 05.03.2026 | Integer Overflow or Wraparound | Multiple Products | Hoch 8,8 | 7,0% |
| 05.03.2026 | Use-After-Free | Multiple Products | Hoch 8,8 | 4,0% |
| 12.02.2026 | Multiple Buffer Overflow | Multiple Products | Hoch 7,8 | 1,7% |
| 15.12.2025 | Use-After-Free WebKit | Multiple Products | Hoch 8,8 | 26% |
Quellen: Known Exploited Vulnerabilities (CISA, gemeinfrei), CVE records (cve.org) und EPSS (FIRST). Die Angriffswahrscheinlichkeit ist die EPSS-Schätzung, dass jemand in den nächsten 30 Tagen versucht, die Schwachstelle auszunutzen.