CVE-2023-41990

moderate-risk
Published 2023-09-12

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.

Do I need to act?

~
2.7% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10 High
LOCAL / LOW complexity

Affected Products (5)

Affected Vendors

Apple

References (15)

Vendor Advisory https://support.apple.com/en-us/HT213599
Vendor Advisory https://support.apple.com/en-us/HT213601
Vendor Advisory https://support.apple.com/en-us/HT213605
Vendor Advisory https://support.apple.com/en-us/HT213606
Vendor Advisory https://support.apple.com/en-us/HT213842
Vendor Advisory https://support.apple.com/en-us/HT213844
Vendor Advisory https://support.apple.com/en-us/HT213845
Vendor Advisory https://support.apple.com/en-us/HT213599
Vendor Advisory https://support.apple.com/en-us/HT213601
Vendor Advisory https://support.apple.com/en-us/HT213605
Vendor Advisory https://support.apple.com/en-us/HT213606
Vendor Advisory https://support.apple.com/en-us/HT213842
Vendor Advisory https://support.apple.com/en-us/HT213844
Vendor Advisory https://support.apple.com/en-us/HT213845
US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-...
49
/ 100
moderate-risk
Severity 24/34 · High
Exploitability 13/34 · Low
Exposure 12/34 · Low