Apple releases another urgent iOS security patch, so install now
Two major flaws in iOS and macOS being addressed
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Applehas released an urgent security patch that addresses multiple flaws in different versions of iOS, iPad OS, and macOS. Some of these flaws, the company confirmed, are being actively abused in the wild.
“Apple is aware of a report that this issue may have been actively exploited.” the company said in asecurity advisorywithout going into detail about who is abusing what, exactly.
The patch fixes a total of five security updates, covering 16 CVEs affectingSafari 16onmacOSBig Sur, macOS Monterey, iOS 16 on iPhone 8 and newer, as well as macOS Monterey 12.6, macOS Big Sur 11.7, and iOS 15.7 and iPadOS 15.7 on most of its devices. The company is also working to address the issues on tvOS.
Arbitrary code execution
Of all the CVEs addressed in this security update, two are being actively exploited, as they allow for arbitrary code execution, it was said.
One is CVE-2022-32917, which allows malicious apps to execute arbitrary code with kernel privileges. This one was fixed, the company said, with improved bounds checks. The second one is CVE-2022-32894, abused against computers running macOS Big Sur 11.7. This one also allows for arbitrary code execution, and is caused by an out-of-bounds write flaw. Apple fixed this one the same way, with improved bounds checking.
Anonymous tipsters drew Apple’s attention to these flaws, the company added.
There’s a major new security update for iOS and macOS, so update now>Apple Safari patched to fix potentially dangerous zero-day flaws>These are the best iPhones right now
The fixes were released mere days after Apple introducediOS 16, a release that brings improvements to many apps, from a redesigned Home app for your smart appliances to better privacy features, and a big focus on the lock screen, with new fonts, colors, and themes to choose from.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
There’s also satellite calling coming to the newly-announcediPhone 14models, a feature coming in November 2022.
Via:The Register
Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.
Cisco issues patch to fix serious flaw allowing possible industrial systems takeover
Washington state court systems taken offline following cyberattack
TP-Link Omada EAP783 review
