Apple Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and remote code execution on the targeted system.

Note:

For CVE-2023-41064,  processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

For CVE-2023-41061, a maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Impact

• Remote Code Execution
• Denial of Service

System / Technologies affected

• Versions prior to iOS 16.6.1 and iPadOS 16.6.1
• Versions prior to macOS Ventura 13.5.2
• Versions prior to watchOS 9.6.2

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• iOS 16.6.1 and iPadOS 16.6.1
• macOS Ventura 13.5.2
• watchOS 9.6.2

Vulnerability Identifier

• CVE-2023-41061
• CVE-2023-41064

Source

• Apple

Related Link

• https://support.apple.com/en-us/HT213907
• https://support.apple.com/en-us/HT213905
• https://support.apple.com/en-us/HT213906