Apple Releases Security Updates
Scheduled updates patch actively exploited zero-day vulnerability
Summary
Scheduled updates patch actively exploited zero-day vulnerability
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
Apple has released security updates to address a vulnerability in multiple products. An attacker could exploit the vulnerability known as CVE-2022-22620 to process maliciously crafted web content and subsequently execute arbitrary code, allowing the attacker to take control of an affected system. This zero-day vulnerability is being actively exploited in the wild.
Remediation advice
Affected organisations are encouraged to review the Apple Security Updates page and apply the necessary updates.
Remediation steps
| Type | Step |
|---|---|
| Patch |
iOS 15.3 and iPadOS 15.3 https://support.apple.com/en-gb/HT213093 |
| Patch |
macOS Monterey 12.2 https://support.apple.com/en-gb/HT213092 |
| Patch |
watchOS 8.4 https://support.apple.com/en-gb/HT204641 |
| Patch |
Safari 15.3 https://support.apple.com/en-gb/HT213091 |
CVE Vulnerabilities
Last edited: 11 February 2022 1:34 pm