Back to CVE Browser

CVE-2023-41061

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-09-07

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected Platforms (CPE)

💻

Apple

Ipados

< 16.6.1

💻

Apple

Iphone Os

< 16.6.1

💻

Apple

Watchos

< 9.6.2

References & Advisories

🔗 http://seclists.org/fulldisclosure/2023/Sep/4

🔗 http://seclists.org/fulldisclosure/2023/Sep/5

🔗 https://support.apple.com/en-us/HT213905

🔗 https://support.apple.com/en-us/HT213907

🔗 https://support.apple.com/kb/HT213905

🔗 https://support.apple.com/kb/HT213907

🔗 http://seclists.org/fulldisclosure/2023/Sep/4

🔗 http://seclists.org/fulldisclosure/2023/Sep/5

Related Vulnerabilities

CVE-2026-437466.5

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS ...

CVE-2026-437456.5

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iP...

CVE-2026-437434.7

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5...

CVE-2026-437426.5

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS ...