2024-01-23 20:36:00

Closed

Apple has identified and fixed a critical zero-day vulnerability in Safari/WebKit on supported versions of macOS, iOS, and iPadOS. Patch now.

N/A

Apple has identified and fixed a critical zero-day vulnerability in Safari/WebKit on supported versions of macOS, iOS, and iPadOS. The vulnerability is a type confusion vulnerability that may lead to remote code execution. Apple states this vulnerability is being actively exploited. Patch now.

Users should apply the following updates. Refer to the Apple Support documentation under References below for how to apply software updates for your device.

macOS:
• macOS Sonoma 14.3 or newer
• macOS Ventura 13.6.4 or newer
• macOS Monterey 12.7.3 or newer

iOS and iPad OS:
• iOS/iPadOS 17.3 or newer
• iOS/iPadOS 16.7.5 or newer
• iOS/iPadOS 15.8.1 or newer

Certified Desktop customers:
macOS updates are available now. The Nudge app enforces a 30 day deadline via recurring notification of the pending update. Users are urged to follow the Nudge prompt and install the associated update as soon as possible.

References
Apple security releases: https://support.apple.com/en-us/HT201222
BleepingComputer: https://www.bleepingcomputer.com/news/apple/apple-fixes-first-zero-day-bug-exploited-in-attacks-this-year/
IT@Cornell – macOS Updates via Nudge: https://it.cornell.edu/endpoint-mgmt/macos-updates-nudge
Apple Support – Update macOS on Mac: https://support.apple.com/en-us/HT201541
Apple Support – Update your iPhone or iPad: https://support.apple.com/en-us/HT204204