Apple Inc (AAPL)

[Investors3]

Apple fixes zero-day security flaws in iOS, macOS, watchOS, and more
Thursday, June 22, 2023 11:53 am

With new operating system updates released on Wednesday, Apple has fixed a pair of serious zero-day security bugs that the company says “may have been actively exploited.”

Andrew Cunningham for Ars Technica:

One of the vulnerabilities, CVE-2023-32434, is a kernel-level flaw that can allow apps to “execute arbitrary code with kernel privileges.” The other, a WebKit bug labeled CVE-2023-32439, can allow the execution of arbitrary code after processing “maliciously crafted web content.” The iOS and iPadOS 16.5.1 updates also fix a non-security bug “that prevents charging with the Lightning to USB 3 Camera Adapter.”

The updates aren’t just coming to iPhones, iPads, and Macs running the latest operating systems. Updates fixing the same bugs have been released for iOS and iPadOS 15, plus macOS versions 11 and 12 (via both macOS and Safari updates). Apple also released an update fixing the kernel bug for watchOS 8, which was the last version of the OS that supported the Apple Watch Series 3 (plus newer watches paired to older iPhones that can’t update to iOS 16). Updates for older versions of watchOS are exceedingly rare, highlighting the severity of any kernel-level security flaw.

The iOS and iPadOS 15.7.7 updates also fix a third closely related WebKit bug that allows remote code execution when processing web content, CVE-2023-32435.

MacDailyNews Take: If you haven’t upgraded already, update your various Apple OSes ASAP.

Related

Apple: All Mac systems and iOS devices are affected by Meltdown and Spectre security flaws
Thursday, January 4, 2018
In "News"

Israeli startup manipulated Apple iPhone to allow government spying, report says
Thursday, August 25, 2016
In "News"

iOS 14.7.1, iPadOS 14.7.1, and macOS Big Sur 11.5.1 fix issue that may have been actively exploited
Monday, July 26, 2021
In "News"

https://macdailynews.com/2023/06/22/apple-fixes-zero-day-security-flaws-in-ios-macos-watchos-and-more/