Apple Zero-Day Vulnerability
In today’s SensCy Cyber Alert, your SensCy team urges Apple product users to install the new updates immediately. The new update remediates a new zero-day vulnerability in the iOS, PadOS,that have been exploited in the wild by threat actors.
CVE-203-42824 is a vulnerability in the kernel that could be abused by a local hacker to elevate their privileges.
“Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6,” Apple noted in an advisory.
The updates are iOS 17.0.3, iPadOS 16.7.0.3, are available for:
- iOS 16.7 and iPadOS 16.7. iPhone 8 and later
- iOS 17.0.1 and iPadOS 17.0.1 iPhone XS and later,
- macOS Ventura 13.6 and macOS Monteret 12.7
- watchOS 9.6.3 and watchOS 10.0.1 Apple Watch Series 4 and later
- Safari 16.6.1
What is a zero-day vulnerability?
In cybersecurity, a zero-day vulnerability refers to a vulnerability in a system or device that has been disclosed but not yet patched. The vulnerability was discovered before developers and security researchers were aware of it and could provide a patch/update.
How to check for new updates:
SensCy highly recommends turning on the Automatic Updates on all Apple devices and products.
On your iPhone/iPad, go to the Settings App, scroll down to General, Click Software Update, Turn on Automatic Updates, and Download iOS 17. If you need additional information, use these Apple links:
