Apple Issues Urgent Security Update for Older iOS and iPadOS Models

Cyber Security

Mar 28, 2023Ravie LakshmananMobile Security

Apple on Monday backported fixes for an actively exploited security flaw to older iPhone and iPad models.

The issue, tracked as CVE-2023-23529, concerns a type confusion bug in the WebKit browser engine that could lead to arbitrary code execution.

It was originally addressed by the tech giant with improved checks as part of updates released on February 13, 2023. An anonymous researcher has been credited with reporting the bug.

WEBINAR

Discover the Hidden Dangers of Third-Party SaaS Apps

Are you aware of the risks associated with third-party app access to your company’s SaaS apps? Join our webinar to learn about the types of permissions being granted and how to minimize risk.

RESERVE YOUR SEAT

“Processing maliciously crafted web content may lead to arbitrary code execution,” Apple said in a new advisory, adding it’s “aware of a report that this issue may have been actively exploited.”

Details surrounding the exact nature of exploitation are currently not known, but withholding technical specifics is standard procedure as it helps prevent additional in-the-wild abuse targeting susceptible devices.

The update is available in versions iOS 15.7.4 and iPadOS 15.7.4 for iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation).

The disclosure comes as Apple rolled out iOS 16.4, iPadOS 16.4, macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5, tvOS 16.4, and watchOS 9.4 with numerous bug fixes.

Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.

Articles You May Like

Apple Set to Sell Vision Pro Headset Outside US: Report
Chinese giant Alibaba posts 86% profit drop but beats revenue expectations
Samsung Galaxy F55 5G Roundup: Launch Date, Expected Price in India, Features, Specifications, and More
Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days
China is still an important market even if investors diversify from it now, says Peak XV