Apple has released updates for Zero Day security vulnerabilities both for iOS e iPadOS that for macOS. La Mela has not released specific details on the update, but has reported the CVE vulnerability–2022–3289discovered by an anonymous researcher.
Apple releases updates for security vulnerabilities on iOS and macOS
According to reports from Apple itself, the security flaw could become a problem for users iPhone, iPad e computer con macOS Monterey. In fact it can be exploited for “Execute arbitrary code with kernel privileges“. This means that the attacker could have admin control of the device, creating really serious damage. Also because the company explains that it is aware of a possible use of this vulnerability.
The danger of this problem convinced Apple to immediately release a patch for this problem. But that’s not the only one that fixes with the update. In fact, it also fixes a vulnerability of WebKitthe engine used by Safari, eMail and other iOS and macOS apps. This flaw is also potentially dangerous: it allows the execution of arbitrary code, which hackers could use to download malware.
This flaw was also found by an anonymous researcher and risked damaging effects on Macs and iPhones.
Both vulnerabilities were present on macOS Monterey 12.5.1 and Apple has released patches for both. But they also affected the iPhone (from 6s onwards), all iPad Pro, iPad Air 2 and later, the iPad 5th generation, iPad Mini from 4 onwards and the iPod touch of week generation. Virtually all of those still supported.
Apple explained that both vulnerabilities are currently being exploited by hackers to attack Apple’s devices. So while the chance that you will have an attack is minimal, it becomes important download updates now. The devices should offer them automatically, but for safety, go to Settings and check that you have the latest version of the operating system installed.