Tech News
Apple Addressed Two Zero-Day Flaws In Intel-based Macs
Apple recently addressed two zero-day vulnerabilities affecting its Intel-based Macs. Alongside releasing the fixes, the firm also confirmed detecting active exploitation of the flaws, urging users to update their systems as soon as possible.
Two Zero-Day Flaws Found In Intel-based Apple Macs
Apple users must update their Macbooks as the tech giant rolled out vulnerability fixes. Specifically, the firm addressed two zero-day flaws affecting its Intel-based Macs, which even went under attack before a fix.
According to Apple’s advisory, the following are the two vulnerabilities that plagued Intel-based Mac systems. Although both vulnerabilities have received the respective CVE identifiers, their severity ratings and CVSS scores remain unclear.
- CVE-2024-44308: A vulnerability in JavaScriptCore that could allow arbitrary code execution by processing maliciously crafted web content. Apple addressed this issue with improved checks.
- CVE-2024-44309: A cross-site scripting vulnerability in WebKit that an adversary could exploit by processing maliciously crafted web content. Regarding the fix, Apple mentioned addressing this “cookie management issue” with improved state management.
Both vulnerabilities first caught the attention of security researchers Clément Lecigne and Benoît Sevens from Google’s Threat Analysis Group (TAG). The researchers then reported the matter to Apple, which patched the flaws and released the fixes with macOS Sequoia 15.1.1.
Besides Macs, Apple also released the same security fixes for its iPhones, iPads, and Apple Vision devices, which also exhibited those issues. Hence, the threat remained as severe for these products as for Macs. Apple released the security fixes with iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, and visionOS 2.1.1. While the updates would automatically reach the eligible devices, users should still check their devices manually for any updates to ensure patching their devices in time.
Apple has addressed several zero-days this year, releasing fixes in January, March, and May.
Let us know your thoughts in the comments.
-
Destination3 months ago
Singapore Airlines CEO set to join board of Air India, BA News, BA
-
Tech News7 months ago
Bangladeshi police agents accused of selling citizens’ personal information on Telegram
-
Motivation6 months ago
The Top 20 Motivational Instagram Accounts to Follow (2024)
-
Guides & Tips5 months ago
Have Unlimited Korean Food at MANY Unlimited Topokki!
-
Guides & Tips5 months ago
Satisfy Your Meat and BBQ Cravings While in Texas
-
Gaming4 months ago
The Criterion Collection announces November 2024 releases, Seven Samurai 4K and more
-
Self Development7 months ago
Don’t Waste Your Time in Anger, Regrets, Worries and Grudges
-
Toys6 months ago
15 of the Best Trike & Tricycles Mums Recommend