[mc4wp_form id=”2320″]
Urgent! Apple users do this now. Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws, it has released security updates to address several security flaws, including two vulnerabilities that it said have been actively exploited in the wild.
It’s currently not clear how the flaws are being weaponized. Apple said both the vulnerabilities were addressed with improved validation in iOS 17.4, iPadOS 17.4, iOS 16.7.6, and iPadOS 16.7.6.
With the latest development, Apple has addressed a total of three actively exploited zero-days in its software since the start of the year. In late January 2024, it plugged a type confusion flaw in WebKit (CVE-2024-23222) impacting iOS, iPadOS, macOS, tvOS, and Safari web browser that could result in arbitrary code execution.
The development comes as the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two flaws to its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to apply necessary updates by March 26, 2024.
The vulnerabilities concern an information disclosure flaw affecting Android Pixel devices (CVE-2023-21237) and an operating system command injection flaw in Sunhillo SureLine that could result in code execution with root privileges (CVE-2021-36380).
Your point of view caught my eye and was very interesting. Thanks. I have a question for you.
Thanks for your comment.
What is your question please