Apple this week released several security updates to address tens of vulnerabilities impacting the iOS and macOS platforms, the Safari browser, and various Windows applications.
20 of the vulnerabilities were patched with the release of iOS 12.1.1, impacting various components, including Airport, Disk Images, FaceTime, File Provider, Kernel, Profiles, Safari, and WebKit.
WebKit was impacted the most, with 6 vulnerabilities addressed in it, followed by Kernel, with 5 flaws, and Safari, with 4 security bugs.
The flaws include elevation of privilege, arbitrary code execution, denial of service, kernel memory leaks, and user interface and address bar spoofing, as well as issues that could lead to viewing contacts from the lock screen or could allow applications to learn the presence of other apps on a device.
The update is available for iPhone 5s and later, iPad Air and later, and iPod touch 6th generation.
macOS Mojave 10.14.2 fixes 13 vulnerabilities in Airport, AMD, Carbon Core, Disk Images, Intel Graphics Driver, IOHIDFamily, Kernel, and WindowServer. Kernel was impacted the most, with 5 vulnerabilities patched in it.
The addressed flaws could allow malicious applications to execute arbitrary code with kernel or system privileges, to elevate privileges, or to read restricted memory, or could be abused for denial of service attacks or to read kernel memory.
Safari 12.0.2 was released with patches for 9 vulnerabilities, 6 of which impact WebKit. The updated browser is available for macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1.
Apple also announced tvOS 12.1.1 this week, with patches for 14 vulnerabilities in five components, namely Airport, Disk Images, Kernel, Profiles, and WebKit. The update is available for Apple TV 4K and Apple TV (4th generation).
iTunes 12.9.2 for Windows and iCloud for Windows 7.9 arrived with fixes for 8 vulnerabilities, Apple revealed. Both are available for machines running Windows 7 and later.
Related: Apple Patches Passcode Bypass in iOS
Related: Researchers Find ‘Authentication Weakness’ in Apple’s Device Enrollment Program
More from Ionut Arghire
- Organizations Worldwide Targeted in Rapidly Evolving Buhti Ransomware Operation
- Google Cloud Users Can Now Automate TLS Certificate Lifecycle
- NCC Group Releases Open Source Tools for Developers, Pentesters
- Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation
- Apria Healthcare Notifying 2 Million People of Years-Old Data Breaches
- European Cybersecurity Firm Sekoia.io Raises $37.5 Million
- GitLab Security Update Patches Critical Vulnerability
- Android App With 50,000 Downloads in Google Play Turned Into Spyware via Update
Latest News
- Industrial Giant ABB Confirms Ransomware Attack, Data Theft
- Organizations Worldwide Targeted in Rapidly Evolving Buhti Ransomware Operation
- Google Cloud Users Can Now Automate TLS Certificate Lifecycle
- Zyxel Firewalls Hacked by Mirai Botnet
- Watch Now: Threat Detection and Incident Response Virtual Summit
- NCC Group Releases Open Source Tools for Developers, Pentesters
- Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation
- New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grids
