{"id":41476,"date":"2023-02-13T21:37:33","date_gmt":"2023-02-13T21:37:33","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/02\/13\/big-safari-kernel-issues-fixed-in-ios-16-3-1-macos-13-2-1-updates\/"},"modified":"2023-02-13T21:38:28","modified_gmt":"2023-02-13T21:38:28","slug":"big-safari-kernel-issues-fixed-in-ios-16-3-1-macos-13-2-1-updates","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/02\/13\/big-safari-kernel-issues-fixed-in-ios-16-3-1-macos-13-2-1-updates\/","title":{"rendered":"Big Safari & Kernel issues fixed in iOS 16.3.1, macOS 13.2.1 updates"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n
\n

16-inch MacBook Professional<\/p>\n


\n \"\"\/
\n <\/a>\n <\/div>\n

\n


\n
\n AppleInsider might earn an affiliate fee on purchases made via hyperlinks on our website.
\n <\/em> \n <\/p>\n<\/div>\n

Monday’s software program updates repair an array of safety points in macOS, iOS<\/a>, and iPadOS, together with one affecting Safari’s WebKit that was being actively exploited. <\/p>\n

\n

Following the discharge, Apple has revealed details<\/a> in regards to the security content<\/a> of every update<\/a>, with loads of crossover between the three working techniques. <\/p>\n<\/div>\n

\n

The primary, a Kernel subject, impacts all three updates, and is described as one the place “an app might be able to execute arbitrary code with kernel privileges. The repair addressed a “use after free subject” by including “improved reminiscence administration. <\/p>\n<\/div>\n

\n

Recognized as CVE-2023-23514, the problem was declared by Xinru Chi of Pangu Lab and Ned Williamson of Google Challenge Zero. <\/p>\n<\/div>\n

\n

The second, a WebKit downside, is listed as impacting the entire working techniques, in addition to Safari<\/a> itself. Below the problem, “processing maliciously crafted net content material might result in arbitrary code execution.” <\/p>\n<\/div>\n

\n

Apple provides that it’s “conscious of a report that this subject might have been actively exploited.” It has since been mounted with “improved checks.” <\/p>\n<\/div>\n

\n

It’s recognized as CVE-2023-23529, and was discovered by “an nameless researcher. <\/p>\n<\/div>\n

\n

The final subject is for Shortcuts, and particularly impacts macOS Ventura<\/a>. Below the problem, an app “might be able to observe unprotected consumer knowledge,” which was mounted with “improved dealing with of momentary recordsdata.” <\/p>\n<\/div>\n

\n

CVE-2023-23522 was discovered by Wenchao Li and Xiaolong Bai of Alibaba Group. <\/p>\n<\/div><\/div>\n