Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Vulnerabilities

Apple Rolls Out Security Updates for iOS, macOS

Apple has released security patches for dozens of vulnerabilities in iOS, macOS, tvOS, visionOS, watchOS, and Safari.

Apple vulnerabilities

Apple on Monday announced a hefty round of security updates that address dozens of vulnerabilities impacting both newer and older iOS and macOS devices.

iOS 17.6 and iPadOS 17.6 were released for the latest generation iPhone and iPad devices with fixes for 35 security defects that could lead to authentication and policy bypasses, unexpected application termination or system shutdown, information disclosure, denial-of-service (DoS), and memory leaks.

Apple resolved the flaws by adding more restrictions and user prompts and by improving checks, data protections, state management, and validation.

Several of these bugs were discovered in third-party components used in Apple’s operating systems, such as the libtiff library or the ANGLE open source graphics engine abstraction layer.

Most of the fixes were also included in iOS 16.7.9 and iPadOS 16.7.9 updates, which are rolling out for older iPhone and iPad devices.

On Monday, Apple released macOS Sonoma 14.6 with patches for nearly 70 vulnerabilities, including nearly all the security defects addressed in iOS and iPadOS. macOS Ventura and macOS Monterey security updates rolled out to address over 40 of these bugs each.

Advertisement. Scroll to continue reading.

Several of these fixes address issues in third-party components, including Apache HTTP Server, curl, libtiff, OpenSSH, and the ANGLE graphics engine.

Apple also announced the release of Safari 17.6 with patches for nine bugs, including eight that affect the WebKit browser engine.

Security updates also rolled out for tvOS, visionOS, and watchOS, to address dozens of the vulnerabilities resolved in iOS and macOS.

Although Apple makes no mention of any of these issues being exploited in the wild, users are advised to update their devices as soon as possible. Additional information on the patches can be found on Apple’s security releases page.

Related: In Other News: Apple’s Spyware Warning, CDK Global Ransom Payment, Sibanye Cyberattack

Related: Apple Says iPhones Will Get Security Updates for at Least 5 Years

Related: Apple Releases iOS 16 Update to Patch Exploited Vulnerability

Related: Apple Unveils Upcoming Privacy and Security Features

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.

Register

In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.

Register

People on the Move

Tom Bonos has been named Chief Revenue Officer at Sumo Logic.

Axonius has appointed Chris Jones as CTSO and Dan Schoenbaum as SVP of Business Development.

Optiv has appointed Sean Forkan as Chief Revenue Officer (CRO).

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.