Apple Addresses Memory Corruption Vulnerability Across Multiple Products

What changed

Apple has resolved a memory corruption vulnerability that could enable an attacker to gain arbitrary read and write access to kernel memory. This flaw was addressed through improved validation mechanisms.

The vulnerability has been fixed in the following versions: iOS 16.7.6, iPadOS 16.7.6, iOS 17.4, iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, and watchOS 10.4.

Who is affected

The vulnerability impacts a wide range of Apple products, potentially affecting users and organizations relying on these systems for daily operations.

Specifically, the affected products include:

• iOS devices running versions prior to 16.7.6 and 17.4
• iPadOS devices running versions prior to 16.7.6 and 17.4
• macOS systems including Monterey, Sonoma, and Ventura versions prior to the latest updates
• tvOS, visionOS, and watchOS devices with outdated software versions

What to do

Users and administrators are urged to promptly update their devices to the latest software versions to mitigate the risk associated with this vulnerability.

Regularly applying security updates is essential to protect against potential exploitation.

• Update iOS to version 16.7.6 or 17.4
• Update iPadOS to version 16.7.6 or 17.4
• Update macOS to Monterey 12.7.4, Sonoma 14.4, or Ventura 13.6.5
• Update tvOS, visionOS, and watchOS to the latest available versions