Virtual Event: Threat Detection & Incident Response Summit - Watch Now
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Vulnerabilities

Apple Rolls Out Security Updates for iOS, macOS

Apple has released security patches for dozens of vulnerabilities in iOS, macOS, tvOS, visionOS, watchOS, and Safari.

Apple vulnerabilities

Apple on Monday announced a hefty round of security updates that address dozens of vulnerabilities impacting both newer and older iOS and macOS devices.

iOS 17.6 and iPadOS 17.6 were released for the latest generation iPhone and iPad devices with fixes for 35 security defects that could lead to authentication and policy bypasses, unexpected application termination or system shutdown, information disclosure, denial-of-service (DoS), and memory leaks.

Apple resolved the flaws by adding more restrictions and user prompts and by improving checks, data protections, state management, and validation.

Several of these bugs were discovered in third-party components used in Apple’s operating systems, such as the libtiff library or the ANGLE open source graphics engine abstraction layer.

Most of the fixes were also included in iOS 16.7.9 and iPadOS 16.7.9 updates, which are rolling out for older iPhone and iPad devices.

On Monday, Apple released macOS Sonoma 14.6 with patches for nearly 70 vulnerabilities, including nearly all the security defects addressed in iOS and iPadOS. macOS Ventura and macOS Monterey security updates rolled out to address over 40 of these bugs each.

Advertisement. Scroll to continue reading.

Several of these fixes address issues in third-party components, including Apache HTTP Server, curl, libtiff, OpenSSH, and the ANGLE graphics engine.

Apple also announced the release of Safari 17.6 with patches for nine bugs, including eight that affect the WebKit browser engine.

Security updates also rolled out for tvOS, visionOS, and watchOS, to address dozens of the vulnerabilities resolved in iOS and macOS.

Although Apple makes no mention of any of these issues being exploited in the wild, users are advised to update their devices as soon as possible. Additional information on the patches can be found on Apple’s security releases page.

Related: In Other News: Apple’s Spyware Warning, CDK Global Ransom Payment, Sibanye Cyberattack

Related: Apple Says iPhones Will Get Security Updates for at Least 5 Years

Related: Apple Releases iOS 16 Update to Patch Exploited Vulnerability

Related: Apple Unveils Upcoming Privacy and Security Features

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

People on the Move

Joe Chen has become Chief Technology Officer at Trellix.

Usercentrics has named Pawan Hegde as COO and Elena Ignatova as CPTO.

SecureAuth has named Mark van Oppen as Chief Revenue Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.