Apple this week released several security updates to address tens of vulnerabilities impacting the iOS and macOS platforms, the Safari browser, and various Windows applications.
20 of the vulnerabilities were patched with the release of iOS 12.1.1, impacting various components, including Airport, Disk Images, FaceTime, File Provider, Kernel, Profiles, Safari, and WebKit.
WebKit was impacted the most, with 6 vulnerabilities addressed in it, followed by Kernel, with 5 flaws, and Safari, with 4 security bugs.
The flaws include elevation of privilege, arbitrary code execution, denial of service, kernel memory leaks, and user interface and address bar spoofing, as well as issues that could lead to viewing contacts from the lock screen or could allow applications to learn the presence of other apps on a device.
The update is available for iPhone 5s and later, iPad Air and later, and iPod touch 6th generation.
macOS Mojave 10.14.2 fixes 13 vulnerabilities in Airport, AMD, Carbon Core, Disk Images, Intel Graphics Driver, IOHIDFamily, Kernel, and WindowServer. Kernel was impacted the most, with 5 vulnerabilities patched in it.
The addressed flaws could allow malicious applications to execute arbitrary code with kernel or system privileges, to elevate privileges, or to read restricted memory, or could be abused for denial of service attacks or to read kernel memory.
Safari 12.0.2 was released with patches for 9 vulnerabilities, 6 of which impact WebKit. The updated browser is available for macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1.
Apple also announced tvOS 12.1.1 this week, with patches for 14 vulnerabilities in five components, namely Airport, Disk Images, Kernel, Profiles, and WebKit. The update is available for Apple TV 4K and Apple TV (4th generation).
iTunes 12.9.2 for Windows and iCloud for Windows 7.9 arrived with fixes for 8 vulnerabilities, Apple revealed. Both are available for machines running Windows 7 and later.
Related: Apple Patches Passcode Bypass in iOS
Related: Researchers Find ‘Authentication Weakness’ in Apple’s Device Enrollment Program
More from Ionut Arghire
- Information of 2.5M People Stolen in Ransomware Attack at Massachusetts Health Insurer
- US, South Korea Detail North Korea’s Social Engineering Techniques
- High-Severity Vulnerabilities Patched in Splunk Enterprise
- Enzo Biochem Ransomware Attack Exposes Information of 2.5M Individuals
- Google Temporarily Offering $180,000 for Full Chain Chrome Exploit
- Toyota Discloses New Data Breach Involving Vehicle, Customer Information
- Adobe Inviting Researchers to Private Bug Bounty Program
- Critical Vulnerabilities Found in Faronics Education Software
Latest News
- Insider Q&A: Artificial Intelligence and Cybersecurity In Military Tech
- In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack
- OpenAI Unveils Million-Dollar Cybersecurity Grant Program
- Galvanick Banks $10 Million for Industrial XDR Technology
- Information of 2.5M People Stolen in Ransomware Attack at Massachusetts Health Insurer
- US, South Korea Detail North Korea’s Social Engineering Techniques
- High-Severity Vulnerabilities Patched in Splunk Enterprise
- Idaho Hospitals Working to Resume Full Operations After Cyberattack
