CVE-2023-41069: Apple iPadOS

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

This issue was addressed by improving Face ID anti-spoofing models. This issue is fixed in iOS 17 and iPadOS 17. A 3D model constructed to look like the enrolled user may authenticate via Face ID.

Affected products

• Apple iPadOS: before 17.0 (fixed in 17.0)
• Apple iPhone OS: before 17.0 (fixed in 17.0)

Published 2024-01-10. Last modified 2026-06-17.