{"uuid": "f94e05ba-acdd-42bc-a530-63ae53349085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22675", "type": "seen", "source": "https://t.me/hacking_Attack/80394", "content": "Black Hat Ethical Hacking\nApple security update fixes new iOS zero-day used to hack iPhones\n\nApple security update fixes new iOS zero-day used to hack iPhonesPost Views: 114 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes In security updates released today, Apple has fixed the tenth zero-day vulnerability since the start of the year, with this latest one actively used in attacks against iPhones.The vulnerability was disclosed in security bulletins released today for iOS/iPadOS 15.7.2, Safari 16.2, tvOS 16.2, and macOS Ventura 13.1, with Apple warning that the flaw \u201cmay have been actively exploited\u201d against previous versions.\n\nThe bug (CVE-2022-42856) is a type confusion issue in Apple\u2019s Webkit web browser browsing engine.\n\nThe flaw was discovered by Cl\u00e9ment Lecigne of Google\u2019s Threat Analysis Group, allowing maliciously crafted web content to perform arbitrary code execution on a vulnerable device.\n\nArbitrary code execution could allow the malicious site to execute commands in the operating system, deploy additional malware or spyware, or perform other malicious actions.\n\nApple addressed the zero-day vulnerability with improved state handling for the following devices\u00a0iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation),\u00a0iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation).\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Patch your iPhones, iPads, and macOS\u00a0VenturaWhile Apple has disclosed that threat actors actively exploited the vulnerability, they have yet to provide any details on the attacks.\n\nHowever, as the vulnerability was discovered by Cl\u00e9ment Lecigne of Google\u2019s Threat Intelligence Team, we will likely learn more in a future blog post.\n\nThis delay in providing details is commonly done to allow users to patch their devices before other threat actors analyze the fixes and develop their own exploits.\n\nEven though this zero-day flaw was likely used in highly-targeted attacks, it is still suggested to install today\u2019s security updates as soon as possible.\nTrending: Exploit XSS Injections in a one-line powerful Technique Trending: Offensive Security Tool: Pycrypt This is the tenth zero-day fixed by Apple since the start of the year:\n\n* In October, Apple fixed a zero-day\u00a0in the iOS Kernel (CVE-2022-42827).\n* In September, Apple addressed a flaw\u00a0in the iOS Kernel (CVE-2022-32917).\n* In August, it fixed two more zero-days\u00a0in the iOS Kernel (CVE-2022-32894) and WebKit (CVE-2022-32893)\n* In March, Apple patched two zero-day\u00a0in the Intel Graphics Driver (CVE-2022-22674) and AppleAVD (CVE-2022-22675).\n* In February, Apple released security updates to address another WebKit zero-day bug\u00a0exploited to target iPhones, iPads, and Macs.\n* In January, Apple patched another pair of zero-days\u00a0allowing code execution with kernel privileges (CVE-2022-22587) and web browsing activity tracking (CVE-2022-22594). \nTrending: Kali Linux 2022.4 \u2013 New Release adds 6 new tools, Kali NetHunter Update, Azure Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Images-for-the-News-po[...]", "creation_timestamp": "2026-09-01T20:01:13.854255Z"}