28 March 2023

Apple backports fixes for recent WebKit zero-day to older iPhones, iPads


Apple backports fixes for recent WebKit zero-day to older iPhones, iPads

Apple has released security updates to backport fixes for a recently patched WebKit zero-day vulnerability to older iPhone and iPad models.

Tracked as CVE-2023-23529, the bug is a type confusion issue in the WebKit browser engine that can be used by a remote attacker to achieve remote code execution by tricking a victim into visiting a specially crafted website. This type confusion issue was addressed with improved checks.

The update is available for: iOS 15.7.4 and iPadOS 15.7.4 for iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation).

The iPhone maker did not share any additional details regarding attacks exploiting this flaw.

In January, Apple issued security updates for macOS, iOS, iPadOS, and WatchOS, to address a zero-day vulnerability in WebKit impacting older devices running iOS v12.

Tracked as CVE-2022-42856, the zero-day is type confusion issue that allows a remote attacker to achieve remote code execution by tricking the victim into visiting a malicious website.


Back to the list

Latest Posts

Tornado Cash users’ funds at risk due to malicious code

Tornado Cash users’ funds at risk due to malicious code

The exploit primarily targeted users accessing Tornado Cash via IPFS gateways, like ipfs.io and cf-ipfs.com.
27 February 2024
Ransomware attack on Optum subsidiary disrupts healthcare services across the US

Ransomware attack on Optum subsidiary disrupts healthcare services across the US

The attack compromised Change Healthcare's IT systems, leading to widespread disruptions in pharmacy services across the US.
27 February 2024
New IDAT Loader variant uses steganography to deliver Remcos RAT

New IDAT Loader variant uses steganography to deliver Remcos RAT

While focusing their strategic efforts on entities in Ukraine, UAC-0184 seemingly aimed to broaden their scope to include further entities associated with Ukraine.
27 February 2024