Urgent update for macOS and iOS! Two actively exploited zero-days fixed
Looking for:
Apple zero day vulnerability - apple zero day vulnerability |
Apple releases security updates for zero-day vulnerability | | Security Magazine.Apple security updates fix 2 zero-days used to hack iPhones, Macs
CVE was a malicious application that was potentially able to execute arbitrary code with kernel privileges. In WebKit, CVE processed maliciously crafted web content that could lead to arbitrary code execution.
And finally, there was the AppleAVD vulnerability. Both vulnerabilities are seeing significant interest by cyber threat researchers and will likely be a target for attackers over the next few days.
The race is on to patch and remediate these vulnerabilities within your organization. Automox recommends patching macOS to Monterey Automox is the cloud-native IT operations platform for modern organizations. The second vulnerability is specific to macOS Monterey.
An out-of-bounds read issue in the Intel Graphics Driver can lead to the disclosure of kernel memory. By abusing the vulnerability, attackers can therefore get an application to read kernel memory. To help identify potentially vulnerable devices, we've created a special report that lists all MacOS, iOS, and iPadOS devices along with their version and whether that version has a fix included for the above-mentioned vulnerabilities.
In short, your Apple devices must have version For non-mobile devices, MacOS April 1, By Esben Dochy. Categories: Vulnerability. Auditing Your Devices To help identify potentially vulnerable devices, we've created a special report that lists all MacOS, iOS, and iPadOS devices along with their version and whether that version has a fix included for the above-mentioned vulnerabilities.
Share on facebook. Share on twitter. Share on linkedin. Since this is the highest level of privilege in the operating system, this would boil down to a complete device takeover. Apple has released the security updates macOS Monterey Any older versions are vulnerable to the vulnerabilities mentioned above.
You can find detailed instructions on how to install the updates on Apple's Security Updates page. Users are advised to apply the updates as soon as possible on any of the following devices:. Any earlier versions of Safari are also vulnerable to CVE Apple once again reports that this issue may have been actively exploited. Based on the information shared by Apple, we have created a special Lansweeper report that lists all macOS, iOS, and iPadOS devices that are still vulnerable to the vulnerabilities that are mentioned above.
This way you have an actionable list of assets that still need to be updated. August 18, By Laura Libeer. Categories: Vulnerability. Users are advised to apply the updates as soon as possible on any of the following devices: macOS Monterey iPhone 6s and later All models of iPad Pro iPad Air 2 and later iPad 5th generation and later iPad mini 4 and later iPod touch 7th generation Safari
Comments
Post a Comment