Shulou(Shulou.com)11/24 Report--

CTOnews.com, February 21 (Xinhua)-- Apple introduced several security patches for iPhone and iPad users in iOS 16.3.1 last week. Apple has now updated its secure web page to reveal which vulnerabilities have been fixed in the latest iOS updates.

CTOnews.com checked Apple's website and learned that Apple has added a new "General vulnerability Disclosure" (CVE) for iOS 16.3.1 and three new CVE for iOS 16.3 released in January.

The new vulnerabilities that Apple listed in iOS 16.3.1 are related to "maliciously crafted certificates" and can lead to DoS attacks, in which attackers find ways to stop the target machine from providing services, which is one of the common attacks used by hackers. Apple said the DoS problem had been fixed through "improved input validation".

In addition, the security content page of iOS 16.3 has been updated to show that three new vulnerabilities have been fixed. One of the vulnerabilities is found in the system's Crash Reporter, which allows an attacker to read arbitrary files as root. Two other Foundation-related vulnerabilities could allow attackers to execute arbitrary code on iPhone or iPad with higher privileges, bypassing the application sandbox.

It is not clear why Apple did not mention this security loophole before. It is worth noting, however, that these vulnerabilities have been fixed in iOS 16.3.1, which is now open to all users. Through macOS 13.2.1 and iOS 16.3.1, Apple has also fixed a security vulnerability related to WebKit, the Safari web browser engine, which has been "actively exploited".

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.