Apple Products Multiple Vulnerabilities
Release Date: 1 Dec 2023
RISK: Extremely High Risk
TYPE: Operating Systems - Mobile & Apps
Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution and information disclosure on the targeted system.
Note:
For CVE-2023-42916 and CVE-2023-42917, processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.1.
Impact
- Remote Code Execution
- Information Disclosure
System / Technologies affected
- Versions prior to Safari Safari 17.1.2
- Versions prior to iOS 17.1.2
- Versions prior to iPadOS 17.1.2
- Versions prior to macOS Sonoma 14.1.2
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- Safari 17.1.2
- iOS 17.1.2
- iPadOS 17.1.2
- macOS Sonoma 14.1.2
沒有留言:
發佈留言