CVE-2023-41991 — Apple Multiple Products Improper Certificate Validation Vulnerability

CISA KEVExploited: confirmedApple

Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.

Vulnerability details

Affected productsMultiple Products
KEV remediation due2023-10-16