high
CISA KEV
CVE-2023-41991
Apple Multiple Products Improper Certificate Validation Vulnerability
// Description
Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.
// Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal remediation due Oct 16, 2023 — past due
Advertisement