About the security content of Safari 18.1 – Apple Support

October 29, 2024 at 02:42PM Apple released updates for Safari 18.1 on macOS Ventura and Sonoma on October 28, 2024, addressing multiple vulnerabilities (CVE-2024-44259, CVE-2024-44244, CVE-2024-44229, CVE-2024-44296). Issues included memory corruption and failures to enforce Content Security Policy, potentially causing process crashes when processing malicious web content. **Meeting Notes Takeaways:** **Release Information:** – **Apple ID:** … Read more

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

October 18, 2024 at 02:36AM Microsoft revealed a security flaw in Apple’s TCC framework affecting macOS, tracked as CVE-2024-44133, allowing unauthorized access to user data via Safari. Patched in macOS Sequoia 15, it highlights vulnerabilities that could expose sensitive information. Users are urged to update to enhance security against potential exploitation. ### Meeting Takeaways – … Read more

About the security content of Safari 17.5 – Apple Support

October 15, 2024 at 02:27PM Apple has released updates for Safari 17.5 on macOS Monterey and Ventura to address multiple vulnerabilities (CVE-2024-27808, CVE-2024-27830, etc.), primarily focusing on integer overflow and improved input validation. These issues could lead to arbitrary code execution and user fingerprinting from malicious web content. ### Meeting Takeaways **Apple ID**: 120896 **Release … Read more

About the security content of Safari 17.6 – Apple Support

October 15, 2024 at 01:57PM Apple ID 120913 will release an update on July 29, 2024, to address vulnerabilities (CVE-2024-40817, CVE-2024-40776, etc.) in Safari 17.6. These issues, resolved through improved state management, may allow unauthorized access to Private Browsing tabs on macOS Monterey and Ventura. **Meeting Takeaways:** – **Apple ID:** 120913 – **Release Date:** July … Read more

Apple Rolls Out Security Updates for iOS, macOS

July 30, 2024 at 04:54AM Apple announced security updates for iOS, iPadOS, and macOS. iOS 17.6 and iPadOS 17.6 fixed 35 security flaws, while macOS Sonoma 14.6 addressed nearly 70 vulnerabilities. Fixes included patches for third-party components. Safari, tvOS, visionOS, and watchOS also received updates. Users are urged to update their devices promptly. More details … Read more

Apple Patches Code Execution Vulnerability in iOS, macOS

March 26, 2024 at 08:48AM Apple has issued security updates for iOS and macOS to fix an arbitrary code execution vulnerability affecting CoreMedia and WebRTC components. This issue, also impacting the dav1d AV1 decoder, can lead to memory corruption and arbitrary code execution. The company credited Google Project Zero researcher Nick Galloway for reporting the … Read more