Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-41061
HistorySep 07, 2023 - 6:15 p.m.

Input validation

2023-09-0718:15:00
PRIOn knowledge base
www.prio-n.com
9
validation
improved logic
attachment
arbitrary code execution
apple
actively exploited
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

28.5%

JSON

A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CPENameOperatorVersion
ipadoslt16.6.1
iphone_oslt16.6.1
watchoslt9.6.2

Related

cnvd 1
cve 1
cvelist 1
apple 2
attackerkb 1
cisa_kev 2
schneier 1
malwarebytes 1
hivepro 1
thn 5
cnvd
cnvd
Arbitrary Code Execution Vulnerability in Various Apple Products (CNVD-2023-68416)
2023-09-09 00:00:00
cve
cve
CVE-2023-41061
2023-09-07 18:15:07
cvelist
cvelist
CVE-2023-41061
2023-09-07 17:30:09
apple
apple
About the security content of watchOS 9.6.2
2023-09-07 00:00:00
About the security content of iOS 16.6.1 and iPadOS 16.6.1
2023-09-07 00:00:00
attackerkb
attackerkb
CVE-2023-41061
2023-09-07 00:00:00
cisa_kev
cisa_kev
Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
2023-09-11 00:00:00
Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
2023-09-11 00:00:00
schneier
schneier
Zero-Click Exploit in iPhones
2023-09-13 11:13:39
malwarebytes
malwarebytes
Two Apple issues added by CISA to its catalog of known exploited vulnerabilities
2023-09-12 02:00:00
hivepro
hivepro
Apple Addresses Two Zero-Day Flaws Exploited by Attackers
2023-09-15 06:10:10
thn
thn
Apple Rushes to Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones
2023-09-08 11:27:00
Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild - Update Now
2023-09-12 05:15:00
Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable
2023-09-22 02:11:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

28.5%

JSON
Related for PRION:CVE-2023-41061
cnvd1cve1cvelist1apple2attackerkb1cisa_kev2schneier1malwarebytes1hivepro1thn5