If you bought a Mac, iPhone or iPad within the last 5 years, you need to upgrade now

[ad_1]

Apple released a barrage of small updates on Monday that may not seem like much. There are no new features, a few minor fixes, and hardly any release notes to speak of. But if you don’t have them installed on your devices, you should update them now.

The iOS 16.3.1, iPadOS 16.3.1, and macOS 13.2.1 updates all include the same WebKit security update that fixes a zero-day flaw known to be used to hack iPhones and Macs:

WebKit

Impact: Processing maliciously crafted web content may lead to arbitrary code execution Apple is aware of a report that this issue may have been actively exploited. Description: A type confusion issue was addressed with improved controls. WebKit Bugzilla: 251944/CVE-2023-23529: An anonymous researcher

Apple has not released details on how the flaw may have been exploited. It’s the first zero-day defect fixed this year.

The patch is for iPhone 8 and later, iPad Air (3rd generation) and later, iPad (5th generation) and later, iPad mini (5th generation) and later, MacBook Pro (2017 and later), MacBook Air (2018 and later) ), MacBook (2017 and later), iMac (2017 and later), Mac mini (2018 and later), and Mac Studio. There’s also Safari 16.3.1 for Macs running macOS Big Sur and Monterey.

Apple has also released updates for tvOS 16.3.2 and watchOS 9.3.1, but has yet to release the CVE rumors. It is unclear if an update is also on the way for iOS 15 devices.

In addition to the WebKit patch, the iOS, iPadOS, and macOS updates also include a fix for a “use after free” issue that could allow an app to execute arbitrary code with kernel privileges.

To update your device, go to the Settings app on your iPhone or iPad or System Settings on macOS Ventura Mac, then General and Software Update. To update Safari on macOS Big Sur or Monterey, go to System Preferences, then Software Update, click the box next to Safari 16.3.1 Update, then select Install Now.

[ad_2]