iOS 14.4.2 closes security holes actively used by hackers
- 0
- 0
- 0
- 0
- 0
- 0
Security researchers are finding more and more vulnerabilities in iOS. The iPhone and other Apple devices are now getting the third security update in a row.
Apple has already closed serious security gaps with iOS 14.4 and iOS 14.4.1. Now iOS 14.4.2 follows with another patch to protect iPhones. The update closes a loophole in Apple’s WebKit, a browser engine that is the developer base for Safari and many other browsers.
iOS 14.4.2 patches vulnerability in Apple’s WebKit
The description of the update simply states: “This update contains important security updates and is recommended for all users.” However, Apple has set up a support page for the update to iOS 14.4.2 and iPadOS 14.4.2 . The patch notes for the update can also be found there. The details describe the effects of the security vulnerability in Apple’s WebKit.
Accordingly, a memory error can cause problems. This enables cyber criminals to carry out so-called “cross-site scripting” by processing malicious web content. Cross Site Scripting (XSS) allows malicious scripts to be smuggled onto otherwise safe sites. According to Apple, there are reports that this vulnerability is actively being exploited by hackers. The company has now closed the gap in iOS 14.4.2 with an “improved management of object downtimes”.
The vulnerability was added to the database of known vulnerabilities and vulnerabilities (CVE) with identifier CVE-2021-1879. It was found by the security research team at Google’s Threat Analysis Group.
Also interesting: Apple threatens mega-lawsuit over MacBook keyboards
Don’t wait to install
Anyone who has an iPhone or other Apple device for which the update is available should download it as soon as possible. Due to the small size of only 177 megabytes and the lack of new functions, there should be no problems with iOS 14.4.2. Closing the dangerous security hole in WebKit make it a mandatory installation.
The security patch not only affects iOS 14.4.2 and iPadOS 14.4.2 and watchOS 7.3.3. It is available for iPhone 6s and newer, iPad Air 2 and newer, iPad mini 4 and newer, and iPod touch (7th generation).
GO TO COMMENTS (0)
