Apple Issues Patch for Critical Zero-Day in iPhones, Macs – Update Now

Apple on Monday produced security updates for iOS, iPadOS, macOS, tvOS, and Safari web browser to handle a zero-day flaw that has occur under active exploitation in the wild.

The issue, tracked as CVE-2024-23222, is a form confusion bug that could be exploited by a risk actor to achieve arbitrary code execution when processing maliciously crafted web information. The tech huge stated the issue was mounted with improved checks.

Sort confusion vulnerabilities, in common, could be weaponized to conduct out-of-bounds memory accessibility, or direct to a crash and arbitrary code execution.

Apple, in a terse advisory, acknowledged that it truly is “aware of a report that this issue could have been exploited,” but did not share any other details about the mother nature of attacks or the danger actors leveraging the shortcoming.

The updates are readily available for the adhering to devices and operating units –

• iOS 17.3 and iPadOS 17.3 – iPhone XS and later, iPad Pro 12.9-inch 2nd era and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and afterwards, iPad Air 3rd technology and afterwards, iPad 6th generation and afterwards, and iPad mini 5th era and later on
• iOS 16.7.5 and iPadOS 16.7.5 – iPhone 8, iPhone 8 Additionally, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st technology
• macOS Sonoma 14.3 – Macs jogging macOS Sonoma
• macOS Ventura 13.6.4 – Macs running macOS Ventura
• macOS Monterey 12.7.3 – Macs functioning macOS Monterey
• tvOS 17.3 – Apple Tv Hd and Apple Television 4K (all models)
• Safari 17.3 – Macs functioning macOS Monterey and macOS Ventura

The advancement marks the initially actively exploited zero-day vulnerability to be patched by Apple this calendar year. Very last yr, the iPhone maker had resolved 20 zero-times that have been employed in real-environment assaults.

In addition, Apple has also backported fixes for CVE-2023-42916 and CVE-2023-42917 – patches for which have been introduced in December 2023 – to more mature equipment –

• iOS 15.8.1 and iPadOS 15.8.1 – iPhone 6s (all styles), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th technology), and iPod touch (7th generation)

The disclosure also follows a report that Chinese authorities unveiled that they have utilized beforehand recognized vulnerabilities in Apple’s AirDrop operation to aid law enforcement to discover senders of inappropriate content, making use of a method centered on rainbow tables.

Found this post interesting? Comply with us on Twitter  and LinkedIn to browse more unique articles we article.

Some parts of this article are sourced from:
thehackernews.com