Apple Zero-Day Vulnerability
In today’s SensCy Cyber Alert, your SensCy team urges Apple product users to install the new updates immediately.
Multiple vulnerabilities have been discovered in Apple products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
This issue is fixed in the following devices:
- Safari versions prior to 6
- iOS and iPadOS versions prior to 6
- iOS and iPadOS versions prior to7.9
- macOS Sonoma versions prior to 6
- macOS Ventura versions prior to 6.8
- macOS Monterey versions prior to7.6
- watchOS ersions prior to 6
- watchOS versions prior to tvOS 6
- visionOS versions prior to 3
What is a zero-day vulnerability?
In cybersecurity, a zero-day vulnerability refers to a vulnerability in a system or device that has been disclosed but not yet patched. The vulnerability was discovered before developers and security researchers were aware of it and could provide a patch/update.
How to check for new updates:
SensCy highly recommends turning on the Automatic Updates on all Apple devices and products.
On your iPhone/iPad, go to the Settings App, scroll down to General, Click Software Update, Turn on Automatic Updates. If you need additional information, use these Apple links: iPhone/ iPad: macOS
