What is CVE-2023-41992?

CVE-2023-41992 is a high-severity vulnerability affecting Apple devices running specific versions of macOS, iOS, and iPadOS. A local attacker can exploit this vulnerability to elevate their privileges. There have been reports of active exploitation against earlier versions of iOS. The issue has been addressed and fixed in macOS Monterey 12.7, iOS 16.7, iPadOS 16.7, and macOS Ventura 13.6. Users with affected devices are advised to update their systems to protect against this vulnerability.

Who is impacted by this?

CVE-2023-41992 affects users of Apple's macOS, iOS, and iPadOS. It impacts macOS Monterey versions up to 12.6, macOS Ventura versions up to 13.5, iOS versions up to 16.6, and iPadOS versions up to 16.6. Devices at risk include iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later. A local attacker could exploit this vulnerability to gain elevated privileges on affected devices.

What to do if CVE-2023-41992 affected you

If you're affected by the CVE-2023-41992 vulnerability, it's crucial to take immediate action to protect your devices. Follow these simple steps:

1. Update your device to the latest software version: macOS Monterey 12.7, iOS 16.7, iPadOS 16.7, or macOS Ventura 13.6.

2. Regularly check for and install software updates to keep your device secure.

3. Be cautious when downloading and installing apps from unknown sources.

By taking these precautions, you can minimize the risk associated with this vulnerability and maintain the security of your devices.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-41992 vulnerability, known as Apple Multiple Products Kernel Privilege Escalation Vulnerability, is indeed listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on September 25, 2023, with a due date of October 16, 2023. To address this vulnerability, users should apply mitigations as per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-754, which involves improper checks for unusual or exceptional conditions.

Learn More

For comprehensive information on this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the sources below.

• Apple Support

• CISA's Binding Operational Directive 22-01