iOS, iPadOS and macOS are again full of holes. Apple released an urgent update

Apple released emergency security updates to fix two zero-day vulnerabilities. They could be used by attackers to hack iPhone, iPad and Mac. The company has warned users about the danger and urges to install patches as a matter of urgency so that third parties do not take full control of the devices.

Two security vulnerabilities allow attackers to impersonate the owner of an Apple device and run any software on their behalf. One of the vulnerabilities (CVE-2022-32894) allowed an application to execute arbitrary code with kernel privileges, another (CVE-2022-32893) related to the WebKit engine that runs Safari and other third-party browsers on iOS. Processing malicious web content may also lead to arbitrary code execution.

Apple said the vulnerabilities affect all smartphones and tablets, starting with the iPhone 6s, iPad 5th generation, iPad Air 2 and iPad mini 4, as well as all versions of the iPad Pro and iPod touch 7th generation. Laptops running macOS Monterey are also at risk. Users are advised to update to iOS 15.6.1, iPadOS 15.6, and macOS Monterey 12.5.1 as soon as possible. A fix for CVE-2022-32893 is also available for Safari on macOS Big Sur and macOS Catalina.

This is not the first time that security holes have been found in Apple’s operating systems. At the beginning of this year, the company had to release a security patch to fix a dangerous zero-day vulnerability.

Source: Trash Box

You may also like