Shulou(Shulou.com)11/24 Report--

CTOnews.com, October 26 (Xinhua)-- according to Apple's official statement, the latest official version of iOS / iPadOS 16.1 contains a fix for 0 day, that is, a security vulnerability that is maliciously exploited immediately after it is discovered, so update it as soon as possible.

Applicable devices for this vulnerability include iPhone 8 and newer models, iPad Pro (all models), iPad Air Gen 3 and newer models, iPad Gen 5 and newer models, iPad mini Gen 5 and newer models.

Impact: applications may be able to execute arbitrary code with kernel privileges, and Apple is aware of reports that this issue may have been actively exploited.

Description: the problem of out-of-bounds writing has been resolved by improving boundary checking.

CVE-2022-42827: anonymous researcher

According to Arstechnica, the number of 0 day vulnerabilities known to Apple this year has reached 89.

CTOnews.com learned that in addition to CVE-2022-42827, 19 other security vulnerabilities have been fixed in Apple's iOS / iPadOS 16.1 official update, including two in the kernel, three in peer-to-peer protocols, two in WebKit, and one in AppleMobileFileIntegrity, Core Bluetooth, IOKit and iOS sandboxie.

"Apple iOS / iPadOS 16.1 official release: iCloud shared Photo Gallery, third-party App real-time events launched, massive content updates"

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.