Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Vulnerabilities

Apple Rolls Out Security Updates for iOS, macOS

Apple has released security patches for dozens of vulnerabilities in iOS, macOS, tvOS, visionOS, watchOS, and Safari.

Apple vulnerabilities

Apple on Monday announced a hefty round of security updates that address dozens of vulnerabilities impacting both newer and older iOS and macOS devices.

iOS 17.6 and iPadOS 17.6 were released for the latest generation iPhone and iPad devices with fixes for 35 security defects that could lead to authentication and policy bypasses, unexpected application termination or system shutdown, information disclosure, denial-of-service (DoS), and memory leaks.

Apple resolved the flaws by adding more restrictions and user prompts and by improving checks, data protections, state management, and validation.

Several of these bugs were discovered in third-party components used in Apple’s operating systems, such as the libtiff library or the ANGLE open source graphics engine abstraction layer.

Most of the fixes were also included in iOS 16.7.9 and iPadOS 16.7.9 updates, which are rolling out for older iPhone and iPad devices.

On Monday, Apple released macOS Sonoma 14.6 with patches for nearly 70 vulnerabilities, including nearly all the security defects addressed in iOS and iPadOS. macOS Ventura and macOS Monterey security updates rolled out to address over 40 of these bugs each.

Advertisement. Scroll to continue reading.

Several of these fixes address issues in third-party components, including Apache HTTP Server, curl, libtiff, OpenSSH, and the ANGLE graphics engine.

Apple also announced the release of Safari 17.6 with patches for nine bugs, including eight that affect the WebKit browser engine.

Security updates also rolled out for tvOS, visionOS, and watchOS, to address dozens of the vulnerabilities resolved in iOS and macOS.

Although Apple makes no mention of any of these issues being exploited in the wild, users are advised to update their devices as soon as possible. Additional information on the patches can be found on Apple’s security releases page.

Related: In Other News: Apple’s Spyware Warning, CDK Global Ransom Payment, Sibanye Cyberattack

Related: Apple Says iPhones Will Get Security Updates for at Least 5 Years

Related: Apple Releases iOS 16 Update to Patch Exploited Vulnerability

Related: Apple Unveils Upcoming Privacy and Security Features

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Jonathan Trull has joined Oracle as Global Head of Cyber Defense.

Plaid has appointed Sean Cassidy as Chief Information Security Officer.

Ann Barron-DiCamillo has been named Executive Vice President and Global Chief Information Security Officer at U.S. Bank.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.