Mar 28, 2023Ravie Lakshmanan
Apple on Monday backported fixes for an actively exploited
security flaw to older iPhone and iPad models.
The issue, tracked as CVE-2023-23529, concerns
a type confusion bug in the WebKit browser engine that could lead
to arbitrary code execution.
It was originally addressed[1]
by the tech giant with improved checks as part of updates released
on February 13, 2023. An anonymous researcher has been credited
with reporting the bug.
WEBINAR
Discover the Hidden Dangers of Third-Party SaaS Apps
Are you aware of the risks associated with third-party app
access to your company’s SaaS apps? Join our webinar to learn about
the types of permissions being granted and how to minimize
risk.
“Processing maliciously crafted web content may lead to
arbitrary code execution,” Apple said[3] in a new advisory,
adding it’s “aware of a report that this issue may have been
actively exploited.”
Details surrounding the exact nature of exploitation are
currently not known, but withholding technical specifics is
standard procedure as it helps prevent additional in-the-wild abuse
targeting susceptible devices.
The update is available in versions iOS 15.7.4 and iPadOS 15.7.4
for iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st
generation), iPad Air 2, iPad mini (4th generation), and iPod touch
(7th generation).
The disclosure comes as Apple rolled
out[4] iOS 16.4, iPadOS 16.4,
macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5,
tvOS 16.4, and watchOS 9.4 with numerous bug fixes.
Found this article interesting? Follow us on Twitter [5]
and LinkedIn[6]
to read more exclusive content we post.
References
- ^
originally addressed
(thehackernews.com) - ^
RESERVE YOUR SEAT
(thn.news) - ^
said
(support.apple.com) - ^
rolled
out (support.apple.com) - ^
Twitter
(twitter.com) - ^
LinkedIn
(www.linkedin.com)
Read more https://thehackernews.com/2023/03/apple-issues-urgent-security-update-for.html