Apple on Wednesday rolled out software program fixes for iOS, iPadOS, macOS, tvOS, and watchOS to deal with quite a few safety flaws affecting its platforms.
This consists of no less than 37 flaws spanning completely different elements in iOS and macOS that vary from privilege escalation to arbitrary code execution and from info disclosure to denial-of-service (DoS).
Chief amongst them is CVE-2022-2294, a reminiscence corruption flaw within the WebRTC element that Google disclosed earlier this month as having been exploited in real-world assaults aimed toward customers of the Chrome browser. There’s, nonetheless, no proof of in-the-wild zero-day exploitation of the flaw focusing on iOS, macOS, and Safari.
In addition to CVE-2022-2294, the updates additionally deal with a number of arbitrary code execution flaws impacting Apple Neural Engine (CVE-2022-32810, CVE-2022-32829, and CVE-2022-32840), Audio (CVE-2022-32820), GPU Drivers (CVE-2022-32821), ImageIO (CVE-2022-32802), IOMobileFrameBuffer (CVE-2022-26768), Kernel (CVE-2022-32813 and CVE-2022-32815), and WebKit (CVE-2022-32792).
Additionally patched is a Pointer Authentication bypass affecting the Kernel (CVE-2022-32844), a DoS bug within the ImageIO element (CVE-2022-32785), and two privilege escalation flaws in AppleMobileFileIntegrity and File System Occasions (CVE-2022-32819 and CVE-2022-32826).
What’s extra, the most recent model of macOS resolves 5 safety vulnerabilities within the SMB module that might be probably exploited by a malicious app to realize elevated privileges, leak delicate info, and execute arbitrary code with kernel privileges.
Customers of Apple gadgets are really helpful to replace to iOS 15.6, iPadOS 15.6, macOS (Monterey 12.5, Huge Sur 11.6.8, and 2022-005 Catalina), tvOS 15.6, and watchOS 8.7 to acquire the most recent safety protections.
