Apple Issues Updates for Older Devices to Fix Actively Exploited Vulnerability

Apple has backported fixes for a lately disclosed critical security flaw influencing older equipment, citing proof of energetic exploitation.

The issue, tracked as CVE-2022-42856, is a form confusion vulnerability in the WebKit browser motor that could outcome in arbitrary code execution when processing maliciously crafted web written content.

Whilst it was initially dealt with by the organization on November 30, 2022, as aspect of iOS 16.1.2 update, the patch was expanded to a broader established of Apple units with iOS 15.7.2, iPadOS 15.7.2, macOS Ventura 13.1, tvOS 16.2, and Safari 16.2.

“Apple is mindful of a report that this issue could have been actively exploited from versions of iOS released before iOS 15.1,” the iPhone maker claimed in an advisory published Monday.

To that stop, the most up-to-date update, iOS 12.5.7, is offered for iPhone 5s, iPhone 6, iPhone 6 In addition, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th technology).

Clément Lecigne of Google’s Menace Assessment Team (TAG) has been credited with identifying the vulnerability, despite the fact that precise details surrounding the exploitation tries in the wild are presently mysterious.

The update arrives as Apple introduced iOS 16.3, iPadOS 16.3, macOS Ventura 13.2, watchOS 9.3, and Safari 16.3 to remediate a extensive list of security flaws, including two bugs in WebKit that could lead to code execution.

macOS Ventura 13.2 also plugs two denial-of-support vulnerabilities in ImageIO and Safari, alongside three flaws in the Kernel that could be abused to leak sensitive data , figure out its memory layout, and execute rogue code with elevated privileges.

It really is not all bug fixes, while. The updates also carry with them the potential to use components security keys to lock down Apple IDs for phishing-resistant two-factor authentication. They also expand the availability of Advanced Info Defense exterior of the U.S.

Found this article fascinating? Abide by us on Twitter  and LinkedIn to examine a lot more unique material we article.

Some parts of this article are sourced from:
thehackernews.com