Under onsdagskvällen så släppte Apple viktiga uppdateringar för macOS, iOS, iPadOS och watchOS – viktiga säkerhetsuppdsateringar så nu är det dags att uppdatera dina Apple-prylar.
Apple har åtgärdat tre nya zero-day-sårbarheter som har utnyttjades i attacker för att installerade Triangulation-spionprogram på iPhones via iMessage zero-click exploits.
På mer begriplig svenska så betyder det att Apple åtgärdat tre, nya, säkerhetsbuggar där spionprogramvara har kunnat installeras bara genom att du som användare tar emot ett meddelande.
Kaspersky slår larm om attack mot äldre versioner av iOS – som pågått sedan 2019
De två säkerhetsbristerna hittades och rapporterades av Kasperskys säkerhetsforskare Georgy Kucherin, Leonid Bezvershenko och Boris Larin. Enligt de första rapporterna så skulle dessa säkerhetsbuggar inte beröra de senaste versionerna av Apples operativsystem men uppenbarligen så var så inte fallet.
Så – uppdatera dina prylar, nu!
Apple information
iOS 16.5.1 and iPadOS 16.5.1
Released June 21, 2023
Kernel
Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, iPad mini 5th generation and later
Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
Description: An integer overflow was addressed with improved input validation.
CVE-2023-32434: Georgy Kucherin (@kucher1n), Leonid Bezvershenko (@bzvr_), and Boris Larin (@oct0xor) of Kaspersky
WebKit
Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, iPad mini 5th generation and later
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: A type confusion issue was addressed with improved checks.
WebKit Bugzilla: 256567
CVE-2023-32439: an anonymous researcher
iOS 15.7.7 and iPadOS 15.7.7
Released June 21, 2023
Kernel
Available for: iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation)
Impact: An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
Description: An integer overflow was addressed with improved input validation.
CVE-2023-32434: Georgy Kucherin (@kucher1n), Leonid Bezvershenko (@bzvr_), and Boris Larin (@oct0xor) of Kaspersky
WebKit
Available for: iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation)
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: A type confusion issue was addressed with improved checks.
WebKit Bugzilla: 256567
CVE-2023-32439: an anonymous researcher
WebKit
Available for: iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation)
Impact: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
Description: A memory corruption issue was addressed with improved state management.
WebKit Bugzilla: 251890
CVE-2023-32435: Georgy Kucherin (@kucher1n), Leonid Bezvershenko (@bzvr_), and Boris Larin (@oct0xor) of Kaspersky
0 kommentarer