Apple patched zero-day vulnerability in older devices to prevent attacks.
Apple has patched a zero-day vulnerability, tracked as CVE-2022-42856, which was discovered by Clément Lecigne of Google’s Threat Analysis Group. This security flaw is a type confusion weakness in Apple’s Webkit web browser browsing engine, which allows maliciously crafted webpages to perform arbitrary code execution. Attackers can exploit this vulnerability by tricking their targets into visiting a malicious website under their control. Once achieved, they can execute commands on the underlying operating system, deploy additional malware or spyware payloads, or trigger other malicious activity.
Apple has backported security patches to older iPhones and iPads to address this bug. The company has also said that they are aware of reports that this security flaw “may have been actively exploited”. CISA has added the zero-day to its list of known exploited vulnerabilities, requiring Federal Civilian Executive Branch (FCEB) agencies to patch it to secure them against active threats.
It is strongly recommended to install the security updates as soon as possible to protect against potential attack attempts. Apple has also patched dozens of other security flaws in its Safari web browser and its latest macOS, iOS, and watchOS versions.
Since the details of this zero-day vulnerability have been made public, it is important to be aware of the potential risks and to take the necessary steps to secure devices. Installing the security updates is the best way to protect against malicious attacks. Additionally, users should be cautious when visiting websites, and should ensure that they are using a secure web browser.
Overall, Apple has taken the necessary steps to protect users from this zero-day vulnerability. By patching the bug in older devices, they have ensured that users can protect their devices from potential attacks. It is important to remain vigilant and to take the necessary steps to protect devices from malicious attacks.
News Source