Exploit / PoCcriticalExploited in the wild

Apple released iOS 17.2 to address a dozen of security flaws

Security Affairsby @securityaffairsDec 12, 2023 · 08:13 UTC (Dec 12, 2023)1 min read1

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-42898 CVE-2023-42890 CVE-2023-42916 CVE-2023-42917

Tags: cve-2023-42898 cve-2023-42890 cve-2023-42916 cve-2023-42917 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-42890 +1 related CVE CVE-2023-42898	The issue was addressed with improved memory handling	8.8 group max	3%		Dec 12, 2023
CVE-2023-42917 +1 related CVE CVE-2023-42916	WebKit Memory Corruption in Apple iOS, macOS, and Safari Enables Arbitrary Code Execution	8.8 group max	9%	KEV	Nov 30, 2023 KEV Dec 4, 2023

From the original article

1 min read at securityaffairs.com

Apple rolled out emergency security updates to backport patches for two actively exploited zero-day flaws to older devices. The company released iOS 17. 2 and iPadOS 17.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.