EXPOSURES › CVE-2023-41061

CVE-2023-41061

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2023-09-11 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-41061 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wild

A validation flaw in Apple's Wallet application allows for potential code execution via malicious attachments, actively exploited in the wild and chained with CVE-2023-41064.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

apple · vendor iOS, iPadOS, and watchOS · product

DESCRIPTION

Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.