Apple Patches 3 Zero-Days Possibly Already Exploited

  /     /     /  
Publicated : 23/11/2024   Category : security


Apple Patches 3 Zero-Days Possibly Already Exploited


In an advisory released by the company, Apple revealed patches for three previously unknown bugs it says may already have been used by attackers.



Three
zero-day vulnerabilities
— tracked as CVE-2023-32409, CVE-2023-28204, and CVE-2023-32373 — were found in Apples WebKit browser platform and affect
iOS, macOS, and iPad products
.
These vulnerabilities affect iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later,
Apple said in one of its new advisories
.
CVE-2023-32409 is a vulnerability in which a remote attacker is able to break out of Web Content sandbox, according to Apple. The vendor said CVE-2023-28204 entails processing Web content that may disclose sensitive information, and CVE-2023-32373 warns that processing maliciously crafted Web content may lead to arbitrary code execution.
Apple said its aware that the bugs may have already been actively exploited by threat actors but
did not elaborate on any of these attacks
.
While Apple reported that two of the three vulnerabilities were reported by anonymous researchers after they were first addressed, one of them — CVE-2023-32409 — was reported by Clément Lecigne, a security engineer in Googles Threat Analysis Group, and Donncha Ó Cearbhaill, a security researcher and hacker in Amnesty Internationals Security Lab.

Last News

▸ IoT Devices on Average Have 25 Vulnerabilities ◂
Discovered: 23/12/2024
Category: security

▸ DHS-funded SWAMP scans code for bugs. ◂
Discovered: 23/12/2024
Category: security

▸ Debunking Machine Learning in Security. ◂
Discovered: 23/12/2024
Category: security


Cyber Security Categories
Google Dorks Database
Exploits Vulnerability
Exploit Shellcodes

CVE List
Tools/Apps
News/Aarticles

Phishing Database
Deepfake Detection
Trends/Statistics & Live Infos



Tags:
Apple Patches 3 Zero-Days Possibly Already Exploited