{"id":16657,"date":"2023-01-24T18:32:04","date_gmt":"2023-01-24T17:32:04","guid":{"rendered":"https:\/\/www.show.it\/apple-patches-exploited-ios-vulnerability-in-old-iphones\/"},"modified":"2023-01-24T18:32:04","modified_gmt":"2023-01-24T17:32:04","slug":"apple-patches-exploited-ios-vulnerability-in-old-iphones","status":"publish","type":"post","link":"https:\/\/www.show.it\/en\/apple-patches-exploited-ios-vulnerability-in-old-iphones\/","title":{"rendered":"Apple Patches Exploited iOS Vulnerability in Old iPhones"},"content":{"rendered":"<p><strong>Apple on Monday announced the release of iOS 12.5.7, which brings a patch for an actively exploited vulnerability to old iPhones and iPads.<\/strong><\/p>\n<p>The tech giant <a href=\"https:\/\/www.securityweek.com\/apple-patches-webkit-code-execution-flaws\/\" target=\"_blank\" rel=\"noreferrer noopener\">released security updates<\/a> for iOS, macOS and other products on Monday to patch many vulnerabilities, including a couple of WebKit flaws that can lead to arbitrary code execution.<\/p>\n<p>In addition to updates for the latest versions of its operating systems, Apple announced the release of iOS 12.5.7, which patches <a href=\"https:\/\/support.apple.com\/en-us\/HT213597\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2022-42856<\/a>, a WebKit vulnerability that has been exploited by hackers against devices running iOS prior to version 15.1.<\/p>\n<p>The vulnerability, whose exploitation was first seen by Google\u2019s Threat Analysis Group (TAG), can be used for arbitrary code execution through specially crafted web content.\u00a0<\/p>\n<p>Apple rolled out its first round of <a href=\"https:\/\/www.securityweek.com\/apple-patches-zero-day-vulnerability-exploited-against-iphones\/\" target=\"_blank\" rel=\"noreferrer noopener\">patches for CVE-2022-42856<\/a> in December 2022, when it released iOS 16.1.2. The fix was also included at the time in macOS Ventura 13.1, tvOS 16.2, Safari 16.2, and iOS and iPadOS 15.7.2.<\/p>\n<p>Security updates for iOS 12 are increasingly rare, but Apple still releases patches when it needs to <a href=\"https:\/\/www.securityweek.com\/ios-12-update-older-iphones-patches-exploited-vulnerability\/\" target=\"_blank\" rel=\"noreferrer noopener\">protect customers against exploited flaws<\/a>.\u00a0<\/p>\n<p>There is still no public information on the attacks involving CVE-2022-42856, but Google\u2019s TAG typically tracks exploits used by sophisticated<a href=\"https:\/\/www.securityweek.com\/google-documents-ie-browser-zero-day-exploited-north-korean-hackers\/\" target=\"_blank\" rel=\"noreferrer noopener\"> state-sponsored threat actors<\/a> or<a href=\"https:\/\/www.securityweek.com\/google-links-exploitation-frameworks-spanish-spyware-vendor-variston\/\" target=\"_blank\" rel=\"noreferrer noopener\"> commercial spyware vendors<\/a>.<\/p>\n<p>According to data from Google, five of the iOS vulnerabilities discovered in 2022 were exploited in the wild.\u00a0<\/p>\n<p><strong>Related: <a href=\"https:\/\/www.securityweek.com\/apple-warns-macos-kernel-zero-day-exploitation\/\" target=\"_blank\" rel=\"noreferrer noopener\">Apple Warns of macOS Kernel Zero-Day Exploitation<\/a><\/strong><\/p>\n<p><strong>Related: <a href=\"https:\/\/www.securityweek.com\/apple-webkit-bugs-exploited-hack-older-iphones\/\" target=\"_blank\" rel=\"noreferrer noopener\">Apple: WebKit Bugs Exploited to Hack Older iPhones<\/a><\/strong><\/p>\n<p><strong>Related: <a href=\"https:\/\/www.securityweek.com\/apple-fixes-exploited-zero-day-ios-161-patch\/\" target=\"_blank\" rel=\"noreferrer noopener\">Apple Fixes Exploited Zero-Day With iOS 16.1 Patch<\/a><\/strong><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/www.securityweek.com\/apple-patches-exploited-ios-vulnerability-in-old-iphones\/\">Apple Patches Exploited iOS Vulnerability in Old iPhones<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/www.securityweek.com\/\">SecurityWeek<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Apple on Monday announced the release of iOS 12.5.7, which brings a patch for an actively exploited vulnerability to old iPhones and iPads. The tech giant released security updates for iOS, macOS and other products on Monday to patch many vulnerabilities, including a couple of WebKit flaws that can lead to arbitrary code execution. In [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":16658,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[48,23],"tags":[],"class_list":["post-16657","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mobile-wireless","category-vulnerabilities"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/posts\/16657","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/comments?post=16657"}],"version-history":[{"count":0,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/posts\/16657\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/media\/16658"}],"wp:attachment":[{"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/media?parent=16657"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/categories?post=16657"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.show.it\/en\/wp-json\/wp\/v2\/tags?post=16657"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}