Apple security updates fix 2 zero-days used to hack iPhones, Macs

Apple has launched emergency safety updates at the moment to repair two zero-day vulnerabilities beforehand exploited by attackers to hack iPhones, iPads, or Macs.

Apple has released an emergency security update to fix two zero-day vulnerabilities. Three versions were released: ‘ macOS Monterey 12.5.1 ‘ for Mac, ‘ iOS 15.6.1 ‘ for iPhone, and ‘ iPadOS 15.6.1 ‘ for iPad, all of which have the same fixed vulnerabilities. is. The two zero-day vulnerabilities were reported by anonymous researchers, and Apple said they ‘may have been exploited by attackers.’

Apple Zero-Day Vulnerabilities

Apple has issued a fix for the zero-day vulnerability that is being tracked as CVE-2022-32893. It is a vulnerability known as an out-of-bounds write that exists in WebKit, the web browser engine that Safari and other applications that can access the internet use.

It describes this vulnerability as a bug that would enable an adversary to achieve arbitrary code execution and, as it’s in the web engine, it could likely be exploited remotely by visiting a page that was maliciously created.

Another vulnerability that was detected was CVE-2022-32894. This bug is a write vulnerability in the kernel of the operating system that allows for writing outside of the allowed range

Finally, this flaw would permit an attacker to carry out arbitrary code execution and, because it’s within the internet engine, may doubtless be exploited remotely by visiting a maliciously crafted web site.

Apple introduced that the exploit was used within the wild. Regardless of this, it has not disclosed any further data relating to these assaults.

Follow Us on: Twitter, Instagram, Facebook to get the latest security news!