Apple this week released several security updates to address tens of vulnerabilities impacting the iOS and macOS platforms, the Safari browser, and various Windows applications.
20 of the vulnerabilities were patched with the release of iOS 12.1.1, impacting various components, including Airport, Disk Images, FaceTime, File Provider, Kernel, Profiles, Safari, and WebKit.
WebKit was impacted the most, with 6 vulnerabilities addressed in it, followed by Kernel, with 5 flaws, and Safari, with 4 security bugs.
The flaws include elevation of privilege, arbitrary code execution, denial of service, kernel memory leaks, and user interface and address bar spoofing, as well as issues that could lead to viewing contacts from the lock screen or could allow applications to learn the presence of other apps on a device.
The update is available for iPhone 5s and later, iPad Air and later, and iPod touch 6th generation.
macOS Mojave 10.14.2 fixes 13 vulnerabilities in Airport, AMD, Carbon Core, Disk Images, Intel Graphics Driver, IOHIDFamily, Kernel, and WindowServer. Kernel was impacted the most, with 5 vulnerabilities patched in it.
The addressed flaws could allow malicious applications to execute arbitrary code with kernel or system privileges, to elevate privileges, or to read restricted memory, or could be abused for denial of service attacks or to read kernel memory.
Safari 12.0.2 was released with patches for 9 vulnerabilities, 6 of which impact WebKit. The updated browser is available for macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1.
Apple also announced tvOS 12.1.1 this week, with patches for 14 vulnerabilities in five components, namely Airport, Disk Images, Kernel, Profiles, and WebKit. The update is available for Apple TV 4K and Apple TV (4th generation).
iTunes 12.9.2 for Windows and iCloud for Windows 7.9 arrived with fixes for 8 vulnerabilities, Apple revealed. Both are available for machines running Windows 7 and later.
Related: Apple Patches Passcode Bypass in iOS
Related: Researchers Find ‘Authentication Weakness’ in Apple’s Device Enrollment Program
You must be logged in to post a comment Login