You might want to snag the new updates.
Apple on Monday released its macOS Ventura 13.3, iOS 16.4, iPadOS 16.4, watchOS 9.4, and tvOS 16.4 updates to the public. While they come with multiple new features, such as new emoji, notifications for web apps, and accessibility improvements, today’s updates also bring security patches. More specifically, they patch more than 30 security exploits.
One of the exploits repaired related to accessibility features could lead to third-party apps accessing information about users’ contacts. Another more serious exploit could let apps access sensitive user data. Other exploits affected could possibly affect system components like Apple Neural Engine, Calendar, Camera, CarPlay, Bluetooth, Find My, iCloud, Photos, Podcasts, and Safari. Apple also fixed exploits found in the kernel, which could lead to arbitrary code execution without the user’s knowledge.
One of the exploits addressed was detailed as follows:
Kernel
Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to execute arbitrary code with kernel privileges
Description: A use after free issue was addressed with improved memory management.
CVE-2023-27969: Adam Doupé of ASU SEFCOM
The updates also include a patch for an exploit found in WebKit, the engine behind Safari and other web browsers on iOS. The exploit could allow for the tracking of sensitive information from users. According to Apple, the problem has been fixed by “removing origin information.”
Users can install iOS, watchOS, and tvOS updates by going to the Settings app, while macOS updates can be found in the System Settings app.
Stay tuned for additional details as they become available.
Via 9to5Mac