Apple have released eight security updates to address vulnerabilities in multiple products. Apple are reporting exploitation of CVE-2022-42827, which impacts iOS and iPadOS. A remote attacker may exploit some of these vulnerabilities to take control of a vulnerable system.

Exploitation of CVE-2022-42827 in iOS and iPadOS Products

Apple have released a new security update to resolve a zero-day vulnerability within iPadOS and iOS. This vulnerability is due to an out-of-bounds write misconfiguration which may allow an attacker to execute arbitrary code on the device with kernel privileges. This vulnerability may enable an attacker to execute malicious code on the device or to corrupt sensitive data.

Threat updates

Date	Update
4 Nov 2022	Apple Releases Security Update for Xcode Apple has released a security update to address vulnerabilities in Xcode. The article has been changed to reflect the addition of the Xcode security update.

Remediation advice

Affected organisations are encouraged to review the following Apple security advisories and apply any relevant updates or workarounds.

Remediation steps

Type	Step
Patch	Safari 16.1 \| HT213495 https://support.apple.com/en-gb/HT213495
Patch	iPadOS 16 \| HT213489 https://support.apple.com/en-gb/HT213489
Patch	iOS 6.1 \| HT213489 https://support.apple.com/en-gb/HT213489
Patch	macOS Big Sur 11.7.1 \| HT213493 https://support.apple.com/en-gb/HT213493
Patch	macOS Monterey 12.6.1 \| HT213494 https://support.apple.com/en-gb/HT213494
Patch	macOS Ventura 13 \| HT213488 https://support.apple.com/en-gb/HT213488
Patch	tvOS 16.1 \| HT213492 https://support.apple.com/en-gb/HT213492
Patch	watchOS 9.1 \| HT213491 https://support.apple.com/en-gb/HT213491
Patch	Xcode 14.1 \| HT213496 https://support.apple.com/en-gb/HT213496

Definitive source of threat updates

https://support.apple.com/en-us/HT201222

Last edited: 4 November 2022 4:04 pm