Apple's latest iOS and macOS updates fix a major web security flaw

[OneMoreThing...]

You'll want to update your Apple devices soon if you value up-to-the-minute software security. 9to5Macnotes Apple has released iOS 15.3.1, iPadOS 15.3.1, macOS Monterey 12.2.1 and watchOS 8.4.2 updates that all fix a significant WebKit security flaw. Specially crafted websites can take advantage of a "use after free" bug (that is, referencing memory after it's freed for use) to run arbitrary code on your device. This isn't a theoretical exercise, either — Apple said there was at least one report of the vulnerability being "actively exploited" before a patch was ready.

The macOS upgrade also fixes a battery drain issue for Intel-based MacBooks, although 9to5 said users with M1-based Macs have also noticed the glitch. Install the new iOS version, meanwhile, and it should fix a problem with unresponsive Braille displays.

This is the third in-the-wild exploit Apple has patched in 2022, including a kernel flaw as well as a Safari bug that could leak your browser history and Google account info. While they're not exciting upgrades, they do suggest Apple is determined to keep up with would-be attackers — and that there are more threats to deal with in the first place.

Click here to view the article...

 

[chscag]

These upgrades should be done to protect security on your devices. Please backup first!

 

[ced89]

Apple security...
But every company is soffering of such tremendous security bugs recently...

 

[Rod]

Yep, they just keep on coming, so far MBP done, iPhone done, iPad in process and Watch tonight.

 

[vansmith]

Apple security...
But every company is soffering of such tremendous security bugs recently...

That's always been the case and always will. Bugs and security holes are always going to be around. I just ran an audit of a small piece of software I make and it found 17 security holes. That's a tiny app and it is inevitable that anything reasonably complex will be much worse.