Apple backports iOS zero-day patch, adds Bluetooth tracker alert
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-23296 | Kernel Memory Corruption in Apple iOS, iPadOS, macOS, tvOS, watchOS, visionOS | 7.8 | 1% | KEV | KEV |
| CVE-2024-27852 | A privacy issue was addressed with improved client ID handling for alternative app marketplaces | 6.5 | <1% |
From the original article
2 min read at helpnetsecurity.com
Apple has backported the patch for CVE-2024-23296 to the iOS 16 branch and has fixed a bug (CVE-2024-27852) in MarketplaceKit that may allow maliciously crafted webpages to distribute a script that tracks iOS users on other webpages. The company has also added a new capability to iOS 17 that will alert users if an unknown Bluetooth tracker is “seen” moving with them.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.