Apple patches two zero-days under attack (CVE-2023-41064, CVE-2023-41061)

Apple has patched two zero-day vulnerabilities (CVE-2023-41064, CVE-2023-41061) exploited to deliver NSO Group's Pegasus spyware.

“The exploit chain was capable of compromising iPhones running the latest version of iOS (16.6) without any interaction from the victim,” Citizen Lab shared.

“The exploit involved PassKit attachments containing malicious images sent from an attacker iMessage account to the victim.”

About the vulnerabilities

Read more

Related Posts

• Zero-Click Exploit in iPhonesa
• Apple races to patch the latest zero-day iPhone exploita
• Apple Hit By 2 No-Click Zero-Days in Blastpass Exploit Chaina
• Apple fixes 3 zero-day vulnerabilities exploited to compromise iPhonesa
• Zero-days fixed by Apple were used to deliver NSO Group’s Pegasus spywarea