Vulnerabilitycritical

Apple patches two zero-days under attack (CVE-2023-41064, CVE-2023-41061)

Help Net Securityby @zeljkazorzSep 12, 2023 · 08:26 UTC (Sep 12, 2023)2 min read4

Read at helpnetsecurity.com

Analyze CVE-2023-41064 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-41064 CVE-2023-41061

Tags: cve-2023-41064 cve-2023-41061 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-41061	Actively Exploited Wallet Flaw Enables Code Execution on Apple iOS, iPadOS, watchOS	7.8	4%	KEV	Sep 7, 2023 KEV Sep 11, 2023
CVE-2023-41064	ImageIO Buffer Overflow in Apple iOS, iPadOS, and macOS Allows Code Execution	7.8	53%	KEV	Sep 7, 2023 KEV Sep 11, 2023

From the original article

2 min read at helpnetsecurity.com

Apple has patched two zero-day vulnerabilities (CVE-2023-41064, CVE-2023-41061) exploited to deliver NSO Group’s Pegasus spyware. “The exploit chain was capable of compromising iPhones running the latest version of iOS (16. 6) without any interaction from the victim,” Citizen Lab shared.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.