Apple has released iOS 15.3 and macOS Monterey 12.2, bringing a wave of security patches to protect users from potential vulnerabilities. This update comes just two weeks after the company addressed critical issues in iOS 15.2.2, which could have been exploited through HomeKit to launch persistent denial-of-service (DoS) attacks.
Comprehensive Vulnerability Fixes
iOS 15.3
- Memory Corruption Bug: A flaw in Apple’s IOMobileFrameBuffer kernel extension, tracked as CVE-2022-22587, could potentially allow attackers to exploit memory corruption, leading to kernel code execution.
- App Store Topics API Update: The company has released an updated version of the App Store Topics API documentation, enhancing accessibility for developers.
macOS Monterey 12.2
- Security Vulnerabilities Addressed: A total of 8 vulnerabilities have been fixed across all supported device families within iOS and macOS Monterey.
- IndexedDB Flaw: Apple has addressed a vulnerability in its use of IndexedDB, which could allow attackers to bypass data synchronization protections when accessed over HTTP.
Impactful Fixes
iOS 15.3
- Root Privileges Fix: Users on supported devices with iCloud Photos enabled have been patched to prevent unauthorized access to device files that grant root privileges.
- App Access via iCloud: An issue allowing apps to access iCloud data has been resolved, ensuring safer app management.
macOS Monterey 12.2
- Smooth Scrolling Fix: A problem causing inconsistent scroll performance in some browsers has been corrected for smoother user experience.
Legacy Updates
Apple also provided updates for macOS Big Sur and macOS Catalina, ensuring continued security with each major release cycle.
TechCrunch Highlights
- TechCrunch’s Carly Page Discusses Apple Updates: Carly Page from TechCrunch delves into the implications of these patches, emphasizing the importance of staying updated to mitigate risks.
- TechCrunch Articles on Related Topics: Explore additional articles and resources on the latest in security, including discussions on the App Store Topics API and other relevant tech developments.
Newsletter Signup
Stay informed about the latest updates and security advisories by signing up for TechCrunch’s newsletter.
This update ensures Apple continues to lead in securing its ecosystem, offering comprehensive protection against emerging threats. Users are advised to apply these patches promptly to enhance their device’s security posture.