Apple Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger information disclosure, remote code execution, elevation of privilege, denial of service condition, security restriction bypass and data manipulation on the targeted system.

Note:

For CVE-2023-41991, a malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

For CVE-2023-41992, a local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

For CVE-2023-41993, processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

CVE-2023-41974 is being exploited in the wild. The vulnerability is a use-after-free vulnerability flaw. An app may be able to execute arbitrary code with kernel privileges.

[Updated on 2026-03-06]

Updated Description, Impact, Vulnerability Identifier and Related Links.