TRIADA
Back to live map

CVE-2023-41990

KEVApple Multiple Products Code Execution Vulnerability
Description

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.

Publishedn/a
Last modifiedn/a
Added to KEVJan 8, 2024
Remediation dueJan 29, 2024
0 recent articles mention this CVE
    30
    Risk assessment · Low

    Actively exploited. Patch immediately.

    Exploitation
    Confirmed in the wild (CISA KEV)
    Federal remediation deadline
    Overdue by 1002 days
    CVSS
    Not yet scored by NVD
    Recommended actions
    1. 1.Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
    2. 2.Treat as emergency change: patch or isolate internet-facing instances first.
    3. 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

    Assessment is derived automatically from the live signals above; verify against your own asset inventory.