CVE-2023-41061
KEVApple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
View CVE record →- Vendor / Project
- Apple
- Product
- iOS, iPadOS, and watchOS
- Date added
- Sep 11, 2023
- Due date
- Oct 2, 2023
- Known ransomware use
- Unknown
- CWEs
- —
Description
Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.