CVE-2023-41990

Apple's iOS, iPadOS, macOS, tvOS, and watchOS contain a font-processing vulnerability enabling code execution.

This unspecified vulnerability allows attackers to execute arbitrary code by processing malicious font files across Apple's entire ecosystem, including devices used by defense contractors. DIB organizations must ensure all Apple devices are patched immediately to prevent unauthorized access and potential data exfiltration.

Shame score — While the vulnerability is actively exploited and affects multiple products, it is a known issue that Apple has disclosed and patched, making it less avoidable than negligent failures.