Daily Archives: September 21, 2023
-
Apple zero days out – September 2023
Apple has fixes for zero days that have been under attack. It appears most are triggered by a specially crafted web content.
- CVE-2023-41991 – A certificate validation issue in the Security framework that could allow a malicious app to bypass signature validation.
- CVE-2023-41992 – A security flaw in Kernel that could allow a local attacker to elevate their privileges.
- CVE-2023-41993 – A WebKit flaw that could result in arbitrary code execution when processing specially crafted web content.
📱 iOS and iPadOS 17.0.1 – 3 bugs fixed
📱 iOS and iPadOS 16.7 – 3 bugs fixed
⌚ watchOS 9.6.3 – 2 bugs fixed
⌚ watchOS 10.0.1 – 2 bugs fixed
💻 macOS Ventura 13.6 – 3 bugs fixed
💻 macOS Monterey 12.7 – 1 bug fixedMind you iOS 17 *just* came out the other day.
These security vulnerabilities have been seen in attacks in the wild.