CVEブラウザに戻る

CVE-2023-41991

🔥 Known Exploited (CISA KEV)MEDIUM

5.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-09-21

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Affected Platforms (CPE)

💻

Apple

Ipados

< 16.7= 17.0

💻

Apple

Iphone Os

< 16.7= 17.0

💻

Apple

Macos

>= 13.0 and < 13.6

References & Advisories

🔗 https://support.apple.com/en-us/HT213927

🔗 https://support.apple.com/en-us/HT213931

🔗 https://support.apple.com/en-us/HT213927

🔗 https://support.apple.com/en-us/HT213931

🔗 https://support.apple.com/kb/HT213927

🔗 https://support.apple.com/kb/HT213931

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41991

関連する脆弱性情報

CVE-2026-437466.5

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS ...

CVE-2026-437456.5

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iP...

CVE-2026-437434.7

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5...

CVE-2026-437426.5

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS ...