Advisory

Apple releases IOS 16.5.1 and MacOS 13.4.1 to address critical and actively exploited vulnerabilities

Take action: It's time to update your Apple devices once again. Plan a coffee break, download the update and go for a half an hour walk.


Learn More

Apple released updates to iOS (16.5.1) and macOS (13.4.1) which address two critical security vulnerabilities are actively exploited.

The two updates include in the update multiple security issues affecting a wide range of Apple devices, including iPhone 6s and later models, iPads, Macs, and even Apple Watches.

One of the vulnerabilities pertains to the device's kernel. Exploiting this flaw would grant attackers the ability to execute arbitrary code with kernel privileges, granting them control over compromised devices. Apple has addressed this issue by enhancing input validation to resolve an integer overflow problem. Reports indicate that this vulnerability had been actively exploited in earlier versions of iOS, prior to iOS 15.7.

The second flaw centers around WebKit, the browser engine employed by Apple's Safari browser. This vulnerability could allow the execution of arbitrary code when processing specially crafted web content. Similar to the kernel flaw, active exploitation of this vulnerability has been reported.

Apple releases IOS 16.5.1 and MacOS 13.4.1 to address critical and actively exploited vulnerabilities