Apple Issues Emergency Patches for 3 New Zero Day Vulnerabilities
In order to fix three new zero-day vulnerabilities that it said are being actively exploited in the wild, Apple released security upgrades for iOS, iPadOS, macOS, tvOS, watchOS, and the Safari web browser on Thursday.
The three security shortcomings are listed below -
CVE-2023-32409 - A weakness in WebKit that a hostile actor could use to escape the Web Content sandbox. Improved bounds checks were implemented to address it.
CVE-2023-28204 - A WebKit out-of-bounds read flaw that might be leveraged to process online material in a way that exposes confidential information. It was resolved by enhancing input validation.
CVE-2023-32373 - A use-after-free flaw in WebKit that, when maliciously generated web content is processed, might result in arbitrary code execution. It was resol...