Apple fixes several zero-day vulnerabilities in iOS 15.4.1 and macOS 12.3.1

With the release of iOS 15.4.1 and macOS Monterey 12.3.1, Apple fixed the operating system bugs. However, in addition to bug fixes, the company has also made security improvements for iOS and macOS, which include fixes for zero-day vulnerabilities.

One of the patched exploits affected iOS and macOS devices. According to Apple, the exploit allowed malicious applications to execute arbitrary code with kernel privileges. A second exploit found in Intel Graphics drivers that only affected macOS could expose kernel memory.

Both exploits were reported by an “anonymous researcher” and have now been fixed:

AppleAVD

Available for: macOS Monterey and iOS 15.

Impact. The application could execute arbitrary code with kernel privileges.

Description. A kernel write bypass issue was addressed with improved bypass checking. Apple is aware of the report and that the vulnerability may have been actively exploited.

CVE-2022-22675: Anonymous Researcher

Intel Graphics Driver

Available for: macOS Monterey

Impact. The application could read kernel memory.

Description. An out-of-memory read issue could expose kernel memory and was addressed through improved input validation. Apple is aware of the report and that the vulnerability may have been actively exploited.

CVE-2022-22674: Anonymous Researcher

For those unfamiliar with the term, a zero-day exploit is essentially a newly discovered vulnerability that has yet to be patched by developers and engineers. Therefore, it is important to keep your devices up to date to protect them from malware.

In terms of other bugs, iOS 15.4.1 fixes an issue that caused iPhone and iPad battery to drain quickly, while macOS 12.3.1 fixes an issue that could cause Bluetooth devices to disconnect unexpectedly from the Mac.

Both iOS 15.4.1 and macOS Monterey 12.3.1 are now available to all users. For more information about fixing vulnerabilities, see Apple page.

See similar

iOS iOS 15 iOS 15.4 macOS macOS Monterey