Apple fixes zero-day security flaws in urgent iOS, iPadOS, and macOS updates

Apple has swiftly released updates for iOS, iPadOS, and macOS, urgently addressing two zero-day security vulnerabilities identified in the WebKit framework, which powers the Safari browser.

The company acknowledged that the vulnerabilities might have been actively exploited in the wild, emphasizing the need for users to update their devices promptly.

The flaws, discovered by Clément Lecigne of Google’s Threat Analysis Group, posed potential risks, with one allowing the disclosure of sensitive information during web content processing, and the other enabling arbitrary code execution.

These security patches are crucial for users of iPhone XS and later, iPad Pro (2nd generation and later), iPad Air (3rd generation and later), and various iPad models. While Apple hasn't disclosed specific details about the attacks leveraging these vulnerabilities, it's clear that the updates are essential for maintaining the security of Apple devices.

To ensure your iPhone, iPad, or Mac is protected, users are advised to initiate the update process immediately. For iPhones and iPads, navigate to Settings > General > Software Update, while on Mac, go to System Settings > General > Software Update. The updates are rolled out as iOS 17.1.2, iPadOS 17.1.2, and macOS Sonoma 14.1.2.