Apple has released new software updates for iPhones, iPads and Macs to fix two security vulnerabilities known by the tech giant to be actively exploited by attackers.
The two vulnerabilities were found in WebKit, the browser engine that powers Safari and other apps, and the kernel, essentially the operating system's core. The two flaws affect iOS, iPadOS and macOS Monterey, report TechCrunch.
The tech giant said the WebKit bug could be exploited if a vulnerable device accessed or processed "maliciously crafted web content (that) may lead to arbitrary code execution".
While the second bug allowed a malicious application "to execute arbitrary code with kernel privileges", which means full access to the device. The two flaws are believed to be related, the report said.
Some successful exploits, such as powerful nation-state spyware, use two or more vulnerabilities in conjunction to break through a device's layers of protections.
It is not uncommon for attackers to first target a vulnerability in the device's browser as a way to break into the wider operating system, granting the attacker wide access to the user's sensitive data.
Apple said iPhone 6s models and later, iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation), and all iPad Pro models are affected.
--IANS
vc/ksk/
(Only the headline and picture of this report may have been reworked by the Business Standard staff; the rest of the content is auto-generated from a syndicated feed.)
You’ve hit your limit of {{free_limit}} free articles this month.
Subscribe now for unlimited access.
Already subscribed? Log in
Subscribe to read the full story →
Quarterly Starter
₹900
3 Months
₹300/Month
Smart Essential
₹2,700
1 Year
₹225/Month
Super Saver
₹3,900
2 Years
₹162/Month
Renews automatically, cancel anytime
Here’s what’s included in our digital subscription plans
Access to Exclusive Premium Stories Online
Over 30 behind the paywall stories daily, handpicked by our editors for subscribers


Complimentary Access to The New York Times
News, Games, Cooking, Audio, Wirecutter & The Athletic
Business Standard Epaper
Digital replica of our daily newspaper — with options to read, save, and share


Curated Newsletters
Insights on markets, finance, politics, tech, and more delivered to your inbox
Market Analysis & Investment Insights
In-depth market analysis & insights with access to The Smart Investor


Archives
Repository of articles and publications dating back to 1997
Ad-free Reading
Uninterrupted reading experience with no advertisements


Seamless Access Across All Devices
Access Business Standard across devices — mobile, tablet, or PC, via web or app