Strong Customer Authentication for Apple Pay, on MacBook Air 2022 with M2 running macOS Ventura 13.3.1
Apple Inc. - Common Criteria 2023-9-INF-4307
activeEAL2+1000 related CVEs
Key facts
- Scheme
- Common Criteria
- Certificate
- 2023-9-INF-4307
- Standard
- Common Criteria
- Assurance level
- EAL2+, ADV_FSP.3, ALC_FLR.3
- Status
- active
- Manufacturer
- Apple Inc.
- Category
- Mobility
- Certification scheme
- ES
- Certified
- May 15, 2024
- Valid until
- May 15, 2029
- Versions
- 13.3.1
Algorithms
- AES
Algorithms named in the security target and certification report.
CVEs that may affect this product
- CVE-2025-43300CRITICAL 10.0KEVEPSS 32.5%
- CVE-2025-24085CRITICAL 10.0KEVEPSS 17.5%
- CVE-2026-86950HIGH 8.8KEVEPSS 1.2%
- CVE-2025-6558HIGH 8.8KEVEPSS 9.5%
- CVE-2025-14174HIGH 8.8KEVEPSS 22.3%
- CVE-2024-23222HIGH 8.8KEVEPSS 10.6%
- CVE-2023-43000HIGH 8.8KEVEPSS 4.0%
- CVE-2023-41993HIGH 8.8KEVEPSS 24.3%
- CVE-2023-37450HIGH 8.8KEVEPSS 18.9%
- CVE-2023-32439HIGH 8.8KEVEPSS 24.0%
- CVE-2023-32373HIGH 8.8KEVEPSS 12.2%
- CVE-2023-32409HIGH 8.6KEVEPSS 16.5%
- CVE-2026-20700HIGH 7.8KEVEPSS 1.4%
- CVE-2024-23296HIGH 7.8KEVEPSS 1.4%
- CVE-2024-23225HIGH 7.8KEVEPSS 1.5%
- CVE-2023-41992HIGH 7.8KEVEPSS 9.5%
- CVE-2023-41064HIGH 7.8KEVEPSS 53.4%
- CVE-2023-32434HIGH 7.8KEVEPSS 51.5%
- CVE-2023-28204MEDIUM 6.5KEVEPSS 14.3%
- CVE-2023-41991MEDIUM 5.5KEVEPSS 13.4%
- CVE-2023-38606MEDIUM 5.5KEVEPSS 2.9%
- CVE-2025-43200MEDIUM 4.2KEVEPSS 1.2%
- CVE-2024-44148CRITICAL 10.0EPSS 0.7%
- CVE-2024-44146CRITICAL 10.0EPSS 0.7%
- CVE-2023-40455CRITICAL 10.0EPSS 1.3%
- CVE-2023-38586CRITICAL 10.0EPSS 1.3%
- CVE-1999-0590HIGH 10.0EPSS 6.0%
- CVE-2026-84520CRITICAL 9.8EPSS 0.4%
- CVE-2025-43526CRITICAL 9.8EPSS 0.5%
- CVE-2025-43428CRITICAL 9.8EPSS 0.7%
- CVE-2025-43347CRITICAL 9.8EPSS 0.9%
- CVE-2025-43343CRITICAL 9.8EPSS 0.8%
- CVE-2025-43342CRITICAL 9.8EPSS 0.7%
- CVE-2025-43275CRITICAL 9.8EPSS 0.6%
- CVE-2025-43261CRITICAL 9.8EPSS 0.8%
- CVE-2025-43253CRITICAL 9.8EPSS 0.7%
- CVE-2025-43245CRITICAL 9.8EPSS 0.7%
- CVE-2025-43244CRITICAL 9.8EPSS 0.6%
- CVE-2025-43243CRITICAL 9.8EPSS 0.7%
- CVE-2025-43237CRITICAL 9.8EPSS 0.5%
- CVE-2025-43234CRITICAL 9.8EPSS 1.0%
- CVE-2025-43233CRITICAL 9.8EPSS 0.7%
- CVE-2025-43232CRITICAL 9.8EPSS 0.7%
- CVE-2025-43222CRITICAL 9.8EPSS 0.8%
- CVE-2025-43220CRITICAL 9.8EPSS 0.8%
- CVE-2025-43209CRITICAL 9.8EPSS 0.9%
- CVE-2025-43199CRITICAL 9.8EPSS 0.8%
- CVE-2025-43198CRITICAL 9.8EPSS 0.6%
- CVE-2025-43194CRITICAL 9.8EPSS 0.8%
- CVE-2025-43193CRITICAL 9.8EPSS 0.8%
and 950 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 10, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain