Apple releases iOS 18, fixing 32 security vulnerabilities

Apple has released iOS 18, fixing 32 security vulnerabilities. The update is available for iPhone XS and later, along with iPad Pro (13-inch, 12.9-inch 3rd gen and newer), iPad Pro 11-inch (1st gen and newer), iPad Air (3rd gen and newer), iPad (7th gen and newer), and iPad mini (5th gen and newer).

All about the fixed vulnerability

A Siri vulnerability allowed attackers with physical access to view sensitive data from the lock screen, now fixed through better state management (CVE-2024-40840, CVE-2024-44139, CVE-2024-44180).

Vulnerabilities in Safari Private Browsing (CVE-2024-44202 & CVE-2024-44127) allowed access to private tabs without authentication, now fixed with better state management.

Other flaws in Core Bluetooth, FileProvider, and WebKit could let malicious apps access data, bypass Bluetooth pairing, or lead to cross-site scripting.

Apple addressed these with improved input validation and bounds checking. Additionally, fixes for the Kernel resolved issues like network traffic leaking outside VPNs, and libxml2 vulnerabilities were patched to prevent crashes from malicious web content.

The update also fixes vulnerabilities in Accessibility, Game Center, ImageIO, and Wi-Fi, enhancing security and preventing unauthorized access. Users should update to iOS 18 immediately to stay protected. To update, go to Settings > General > Software Update and follow the instructions. This ensures your device is secure against the patched vulnerabilities.