Apple Rolls Out Urgent Patches for Zero-Day Flaws Impacting iPhones, iPads and Macs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-46690 | An out-of-bounds write issue was addressed with improved input validation | 7.8 | <1% | ||
CVE-2023-32435+1 related CVE | Memory Corruption in Apple WebKit (iOS, iPadOS, macOS, Safari) Enables Code Execution | 8.8 group max | 23% | KEV | KEV |
CVE-2023-37450+1 related CVE | Arbitrary Code Execution in Apple WebKit (iOS, iPadOS, macOS, Safari, tvOS, watchOS) | 8.8 group max | 19% | KEV | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jul 25, 2023 Endpoint Security / Zero Day Apple has rolled out security updates to iOS, iPadOS, macOS, tvOS, watchOS, and Safari to address several security vulnerabilities, including one actively exploited zero-day bug in the wild. Tracked as CVE-2023-38606 , the shortcoming resides in the kernel and permits a malicious app to modify sensitive kernel state potentially.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.