Apple Patches Zero-Day Vulnerability That Could Let iPhones, iPads, and MacBooks Get Hacked

Apple patched many zero-day bugs in iOS 15.4.1 and macOS 12.3.1 updates
Apple releases iOS 14.4.2, iOS 12.5.2, and watchOS 7.3.3 updates that patch the critical zero-day vulnerability

The first zero-day vulnerability is tracked under the code CVE-2022-22587. This is a memory corruption bug in IOMobileFrameBuffer that affects iOS, iPadOS, and macOS Monterey.

When successfully exploiting this vulnerability, an attacker can execute arbitrary code with kernet privileges on the victim's device.

"Apple has received notice that this vulnerability is being actively exploited by hackers," Apple said.

Below is a list of devices affected by CVE-2022-22587:

iPhone 6s and up
iPad Pro (all models)
iPad 5th generation or later
iPad mini 4 or later and iPod touch (7th generation)
Devices running macOS Monterey

The vulnerability was found by an anonymous security researcher, MBition - Mercedes-Benz Innovation Lab researcher Meysam Firouzi and researcher Siddharth Aeri.

Both Firouzi and Aeri shared that they found this vulnerability based on independent research, not knowing that hackers are actively exploiting it.

Apple Patches Zero-Day Vulnerability That Could Let iPhones, iPads, and MacBooks Get Hacked Picture 1

The second zero-day vulnerability is a Safari WebKit bug in iOS and iPadOS that allows websites to track a user's surfing activity and a user's identity in real time.

The vulnerability was reported to Apple by Martin Bajanik of FingerprintJS on November 28, 2021 and made public on January 14, 2022. After the researcher revealed it, it was assigned the code CVE-2022-22594 and patched in the newly released iOS 15.3 and iPadOS 15.3 update.

These are the first zero-day vulnerabilities to be patched by Apple in 2022.

ios vulnerability zero-day

Micah Soto

Update 27 January 2022

You should read it

May be interested

'Printer Catastrophe' Vulnerability Threatens All Versions of Windows
although microsoft releases patches for windows vulnerabilities on a monthly basis, there are still security issues that remain. recently, the us cybersecurity and infrastructure agency (cisa) reported a critical vulnerability in the windows print spooler system.
In turn, Microsoft admitted being hacked because of the SolarWinds vulnerability
microsoft has admitted that they were attacked by hackers through a vulnerability of solarwinds' software update system. however, the software giant denied that hackers used their software to infect users as well as customers.
VMware patches RCE Spring4Shell vulnerability on a wide range of products
vmware has released a number of security updates to patch remote code execution for a dangerous vulnerability called spring4shell in the company's virtual machine and cloud products.
Here is the list of iPhones and iPads that support iOS 16 and iPadOS 16
after countless rumors and leaks, apple finally officially announced ios 16 and ipados 16 on stage at wwdc 2022
GitLab patches critical vulnerability that allows hackers to take control of accounts
gitlab has just resolved a critical vulnerability that could allow hackers to take over users' accounts with hard-coded passwords. it is worth mentioning here that the hacker can perform the attack remotely.
Apple released iOS 13.4.1, fixing important bugs on iPhones and iPads
ios 13.4.1 doesn't bring any new features, but it fixes some relatively important bugs.
Intel will stop releasing patches for the Specter v2 security hole on some older CPUs
recently, intel has confirmed that it will stop updating the meltdown and specter security patches for certain products.
Apple considers removing Qualcomm chips on iPhones and iPads next year
amidst escalating tension on legal issues of qualcomm, the wall street journal said apple is designing 2018 iphone and ipad models without qualcomm lte chips.
Exchanging fake iPhones for real iPhones for 10 consecutive years caused Apple to lose 12 million USD
five chinese citizens living in the los angeles area exchanged fake iphones for real iphones 16,000 times over the course of 10 years, causing more than $12 million in damage to apple.
Apple releases urgent zero-day patches for iOS, iPadOS and macOS, users note
apple has just rushed to release a series of rapid security response (rsr) updates to address a new zero-day vulnerability that is being actively exploited.