Stefan Mileschin

iPhones, iPads, and Macs wide open

Apple released fixes for two critical zero-day vulnerabilities in iPhones, iPads, and Macs that give hackers dangerous access to the devices internals.

The first vulnerability, CVE-2022-22675, resides in macOS for Monterey and in iOS or iPadOS for most iPhone and iPad models. The flaw, which stems from an out-of-bounds write issue, gives hackers the ability to execute malicious code that runs with privileges of the kernel, the most security-sensitive region of the OS. CVE-2022-22674, meanwhile, also results from an out-of-bounds read issue that can lead to the disclosure of kernel memory.

Apple is not exactly being helpful in providing details for the flaws but that might be because it is facing an existential crisis which it does not want its fanboys to catch. It can’t do its normal “this only affects a small number of users and is not a serious threat” line as it admits that the issues have been weaponised and used.

https://fudzilla.com/news/54627-appl...ulnerabilities