 |
| Apple has released a security update for WebKit vulnerabilities |
Apple released a series of security updates Monday to combat hackers who are actively exploiting two vulnerabilities that affect some of the next-generation iPhones, as well as all iPad and iPod models.
The company said: The update includes a fix that improves handling of a CVE-2021-30665 vulnerability. This is a memory corruption issue that allows hackers to run random code on a victim's device.
Another vulnerability is CVE-2021-30663. Apple addresses this issue by improving input validation so that third parties can run arbitrary code.
Both issues affect WebKit, Apple's framework that can display most of the web content displayed on your device (unless you are using Chrome or Firefox on Mac OS).
The company acknowledged that there were reports that hackers used these two issues to infiltrate victims' devices, but it did not say which hackers were exploiting the vulnerabilities.
This is the latest security vulnerability that Apple has encountered in the past few months.
Last week, the company sent a security update program that fixed a logical flaw that allowed hackers to bypass Apple's security protections and block users as targets via malicious apps.
Recent researchers also found that not only did hackers lose AirDrop email addresses by exploiting vulnerabilities, but they also targeted Apple developers.
Models affected by this security patch include all iPad Pro models, iPad Air 2 and later, iPad 5 or later, iPad Mini 4 and later, iPod touch 7th generation, and iPhone 6s and later.
If you are using an old device such as iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad Mini 2 and 3, iPad Mini, or iPod touch (6th generation), the company has also released iOS 12.5.3 to address the issue fix. Shortcomings of WebKit.
The company has also released an update to address buffer overflow issues instead of memory corruption errors.
In order to protect our customers, the company said, we will not disclose, discuss, or confirm any security issues until the latest version is listed on Apple's Security Updates page before we investigate and publish fixes or releases.