{"uuid": "bbcf6677-6905-41ce-8f27-26f51dd18b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41064", "type": "seen", "source": "https://t.me/KomunitiSiber/759", "content": "Apple Rushes to Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones\nhttps://thehackernews.com/2023/09/apple-rushes-to-patch-zero-day-flaws.html\n\nApple on Thursday released emergency security updates for iOS, iPadOS, macOS, and watchOS to address two zero-day flaws that have been exploited in the wild to deliver NSO Group's Pegasus mercenary spyware.\nThe issues are described as below -\n\nCVE-2023-41061\u00a0- A validation issue in Wallet that could result in arbitrary code execution when handling a maliciously crafted attachment.\nCVE-2023-41064", "creation_timestamp": "2023-09-08T06:02:37.000000Z"}