NVD Vulnerability Detail

CVE-2023-41990

Summary	The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.
Publication Date	Sept. 12, 2023, 9:15 a.m.
Registration Date	Sept. 12, 2023, 4 p.m.
Last Update	Nov. 21, 2024, 5:22 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://support.apple.com/en-us/HT213599	Release Notes Vendor Advisory
2	https://support.apple.com/en-us/HT213599	Release Notes Vendor Advisory
3	https://support.apple.com/en-us/HT213601	Release Notes Vendor Advisory
4	https://support.apple.com/en-us/HT213601	Release Notes Vendor Advisory
5	https://support.apple.com/en-us/HT213605	Release Notes Vendor Advisory
6	https://support.apple.com/en-us/HT213605	Release Notes Vendor Advisory
7	https://support.apple.com/en-us/HT213606	Release Notes Vendor Advisory
8	https://support.apple.com/en-us/HT213606	Release Notes Vendor Advisory
9	https://support.apple.com/en-us/HT213842	Release Notes Vendor Advisory
10	https://support.apple.com/en-us/HT213842	Release Notes Vendor Advisory
11	https://support.apple.com/en-us/HT213844	Release Notes Vendor Advisory
12	https://support.apple.com/en-us/HT213844	Release Notes Vendor Advisory
13	https://support.apple.com/en-us/HT213845	Release Notes Vendor Advisory
14	https://support.apple.com/en-us/HT213845	Release Notes Vendor Advisory

Common Vulnerabilities List

JVN Vulnerability Information

複数のアップル製品における脆弱性

Title	複数のアップル製品における脆弱性
Summary	iPadOS、iOS、macOS 等複数のアップル製品には、不特定の脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 23, 2023, midnight
Registration Date	Dec. 18, 2023, 9:40 a.m.
Last Update	Dec. 18, 2023, 9:40 a.m.

Affected System

アップル

iOS 15.7.8 未満

iOS 16.0 以上 16.3 未満

iPadOS 15.7.8 未満

iPadOS 16.0 以上 16.3 未満

macOS 11.7.9 未満

macOS 12.0.0 以上 12.6.8 未満

macOS 13.0 以上 13.2 未満

tvOS 16.3 未満

watchOS 9.3 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2023-41990	https://www.cve.org/CVERecord?id=CVE-2023-41990
National Vulnerability Database (NVD)
2	CVE-2023-41990	https://nvd.nist.gov/vuln/detail/CVE-2023-41990

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT213599	https://support.apple.com/en-us/HT213599
2	HT213601	https://support.apple.com/en-us/HT213601
3	HT213605	https://support.apple.com/en-us/HT213605
4	HT213606	https://support.apple.com/en-us/HT213606
5	HT213842	https://support.apple.com/en-us/HT213842
6	HT213844	https://support.apple.com/en-us/HT213844
7	HT213845	https://support.apple.com/en-us/HT213845
Apple セキュリティアップデート
8	HT213599	https://support.apple.com/ja-jp/HT213599
9	HT213601	https://support.apple.com/ja-jp/HT213601
10	HT213605	https://support.apple.com/ja-jp/HT213605
11	HT213606	https://support.apple.com/ja-jp/HT213606
12	HT213842	https://support.apple.com/ja-jp/HT213842
13	HT213844	https://support.apple.com/ja-jp/HT213844
14	HT213845	https://support.apple.com/ja-jp/HT213845

Change Log

No	Changed Details	Date of change
1	[2023年12月18日] 掲載	Dec. 18, 2023, 9:40 a.m.