Apple warns of security vulnerabilities in the kernel of iOS, iPadOS and macOS. There are indications that they are already being actively exploited. Attackers can use the vulnerability to gain full access to the end device and execute arbitrary code. Updates to iOS/iPadOS version 15.6.1 or macOS 12.5.1 close them.
The vulnerability that has now been closed in iOS, iPadOS and macOS has the CVE number CVE-2022 -32894, Details not public yet.
An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
Apple on vulnerabilities in iOS, iPadOS and macOS
Also vulnerabilities in HTML rendering -Engine WebKit will be closed by the updates. WebKit is an Apple-developed fork of KHTML and KDE's JavaScript implementation KJS, which forms the basis for Apple's Safari browser.
An update to watchOS 8.7.1 is also available for the Apple Watch, but only exclusively for the Apple Watch Series 3, which was released in 2017. It does not contain any product updates, but represents an error correction. The new wearable operating system fixes a bug that could cause the 3rd generation Apple Watch to crash unexpectedly.
Updates for iOS , iPadOS, watchOS and macOS
Apple is rolling out the following new operating system versions in waves as usual:
- iOS 15.6.1
- iPadOS 15.6.1
- watchOS 8.7.1
- macOS Monterey 12.5.1
Apple security updates for iOS , iPadOS, watchOS and macOSiOS and iPadOS 16 appear on the horizon
iOS 15.6 and the corresponding operating systems will be one of the last releases for the 15.x development branch. Just in time for the in-house developer conference WWDC 2022, Apple has published the first developer previews of iOS 16 and iPadOS 16 and their derivatives.
iOS 16 makes CarPlay the car operating system and iPadOS 16 should offer better multitasking, but shift a bit and only appear later. Stage Manager, the new multitasking function for iPads, causes problems and is said to delay the start of the operating system on the iPad.