CVE Watch—

CVE-2023-41061

Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

3.1%

p87

KEV

YES

Sep 11, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

3.1%EPSS · 30 days3.1%

2026-08-022026-08-31

KEV catalog record

Product

Apple / iOS, iPadOS, and watchOS

Vulnerability

Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

Added to KEV

Sep 11, 2023

Remediate by

Oct 2, 2023

Known ransomware use

Summary description

Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://support.apple.com/en-us/HT213905, https://support.apple.com/kb/HT213907; https://nvd.nist.gov/vuln/detail/CVE-2023-41061

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2021-1879—

93.8%

KEV—78Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability—CVE-2020-9818—

82.0%

KEV—75Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability—CVE-2020-9819—

81.1%

KEV—74Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability—