There are three security holes that urgently need to be plugged. Apple has reacted quickly.
Manzana has released a security bulletin, asking its users to Immediately update your Apple devicedue to the discovery of three zero-day exploits that criminals are taking advantage of, and that can put data on your device at risk.
We are not just talking about the iPhone or iPad. Exploits also affect to Mac computers, Apple Watch, and Apple TV devices.
To solve the problem Apple has used its new Rapid Security Response automatic update systemwhich premiered a few months ago.
This system distributes emergency updates automaticallywhen they are ready. Even so, they may take a while to arrive, that’s why Apple asks to manually update devicesthrough the Settings menu.
Three dangerous exploits on Apple devices
Researchers have detected three serious zero-day vulnerabilities associated with the WebKit browser engine. That’s why it affects all products, because they all use the same browser.
Techspot has collected the problems generated by these zero-day exploits:
- CVE-2023-32409 – a remote attacker can escape the web content security sandbox
- CVE-2023-28204 – Web content processing may reveal sensitive information
- CVE-2023-32373 – Processing malicious web content can lead to arbitrary code execution.
As we see, it is three serious holes because they allow an attacker to collect data and execute codeleaving the device completely unprotected.
They can sneak in even if you have an antivirus installed.
To cover these three exploits you simply have to update to version 16.5 of iOS and iPadOS, as well as the new version of MacOS.
The patch also fixes 30 other vulnerabilities or bugs detected in version 16.4.
This is the list of affected devices:
- All iPad Pro models
- iPad Air (3rd generation and later)
- iPad (5th generation and later)
- iPad Mini (5th generation and later)
- iPhone 6s and later models
- Mac workstations and laptops running macOS, Big Sur, Monterey, and Ventura
- Apple Watch (series 4 and later)
- Apple TV 4K and HD
If you have any of them, run to update it. You may have already installed this security patch automatically. If not, do it manually from Settings.
The zero-day exploits are the most dangerous of all, because they are a hole open to your dataor the possibility of install spyware or malware.