Threats Tagged 'ios'

Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code. The post Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities appeared first on SecurityWeek .

A denial-of-service (DoS) vulnerability exists in the in-app browser of the LINE client for iOS. The issue arises from insufficient safeguards when handling arbitrary URL schemes, which may cause the application to become unresponsive or crash. No specific affected versions or patches have been identified in the provided data. There is no evidence of active exploitation in the wild at this time.

Two zero-day vulnerabilities affecting Apple devices running iOS 15 and macOS Monterey were actively exploited and patched in August 2022. One is a kernel out-of-bounds write flaw allowing arbitrary code execution with kernel privileges (CVE-2022-32894). The other is a WebKit out-of-bounds write vulnerability enabling code execution via malicious web content (CVE-2022-32893). Apple released patches in iOS 15.6.1 and macOS Monterey 12.5.1 to address these issues. Users were urged to update immediately due to active exploitation reports.