Apple Emergency Update for New Zero-Day Used to Hack iPhones
- С сайта: Zero-Day(cybersecuritynews.com)
- Вернуться к списку новостей
С сайта: Zero-Day(cybersecuritynews.com)
Apple has discovered a Zero-day vulnerability affecting iOS and iPadOS versions earlier than 17.0.3, which could allow threat actors to elevate their privileges. The CVE for this vulnerability has been given as CVE-2023-42824, and the severity of this vulnerability is currently being analyzed.
It was also mentioned that iOS 16.6 versions are actively being targeted with this vulnerability by threat actors for exploitation.
Apple has addressed this new Zero-day along with CVE-2023-5217 that affected libvpx, a Heap buffer overflow in vp8 encoding. Moreover, several Chromium-based browsers have used this particular vulnerability, including Microsoft Edge, Google Chrome, and Mozilla Firefox.
All the affected vendors have published their security advisories for addressing this vulnerability. This vulnerability has a severity of 8.8 ( High ) given by the National Vulnerability Database (NVD).
📁🄳🄾🄲🅄🄼🄴🄽🅃
CVE-2023-42824 – Privilege Escalation
Apple states that threat actors exploit this vulnerability to elevate their privileges. There has been no evidence of a publicly available exploit for this vulnerability.
Products affected by this vulnerability include iPhone XS and, later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later.
In order to fix this vulnerability, users are recommended to upgrade to iOS 17.0.3 to prevent this vulnerability from getting exploited.
CVE-2023-5217 – Heap Buffer Overflow in libvpx
This is a Heap buffer overflow vulnerability that can lead to arbitrary code execution on affected products. This particular vulnerability has affected several Chromium-based browsers, and patches are being issued.
In order to fix this vulnerability, users are recommended to upgrade to the following versions of the browsers.
According to Apple, this vulnerability affects the iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later.
Apple has recommended its iOS and iPadOS users upgrade to version 17.0.3 in order to fix these vulnerabilities.
#Cyber_Security_News #Vulnerability #Zero-Day #Apple #cyber_security #vulnerability #Zero_day
Оригинальная версия на сайте:
Apple Emergency Update for New Zero-Day Used to Hack iPhones
Author: EswarApple has discovered a Zero-day vulnerability affecting iOS and iPadOS versions earlier than 17.0.3, which could allow threat actors to elevate their privileges. The CVE for this vulnerability has been given as CVE-2023-42824, and the severity of this vulnerability is currently being analyzed.
It was also mentioned that iOS 16.6 versions are actively being targeted with this vulnerability by threat actors for exploitation.
Apple has addressed this new Zero-day along with CVE-2023-5217 that affected libvpx, a Heap buffer overflow in vp8 encoding. Moreover, several Chromium-based browsers have used this particular vulnerability, including Microsoft Edge, Google Chrome, and Mozilla Firefox.
All the affected vendors have published their security advisories for addressing this vulnerability. This vulnerability has a severity of 8.8 ( High ) given by the National Vulnerability Database (NVD).
📁🄳🄾🄲🅄🄼🄴🄽🅃
CVE-2023-42824 – Privilege Escalation
Apple states that threat actors exploit this vulnerability to elevate their privileges. There has been no evidence of a publicly available exploit for this vulnerability.
Products affected by this vulnerability include iPhone XS and, later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later.
In order to fix this vulnerability, users are recommended to upgrade to iOS 17.0.3 to prevent this vulnerability from getting exploited.
CVE-2023-5217 – Heap Buffer Overflow in libvpx
This is a Heap buffer overflow vulnerability that can lead to arbitrary code execution on affected products. This particular vulnerability has affected several Chromium-based browsers, and patches are being issued.
In order to fix this vulnerability, users are recommended to upgrade to the following versions of the browsers.
- Google Chrome – 117.0.5938.132
- Mozilla Firefox 118.0.1
- Microsoft-Edge 116.0.1938.98
According to Apple, this vulnerability affects the iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later.
Apple has recommended its iOS and iPadOS users upgrade to version 17.0.3 in order to fix these vulnerabilities.
#Cyber_Security_News #Vulnerability #Zero-Day #Apple #cyber_security #vulnerability #Zero_day
Оригинальная версия на сайте:
