Apple Multiple Products Integer Overflow Vulnerability Allowing Arbitrary Code Execution with Kernel Privileges

A vulnerability exists in multiple Apple products, including iOS, iPadOS, macOS, and watchOS, due to an integer overflow that was not properly validated. This flaw could enable an application to execute arbitrary code with kernel privileges. Apple has acknowledged reports of this vulnerability being actively exploited in versions of iOS prior to 15.7.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with kernel privileges, allowing an application to execute code at the highest level of system access.

Remediation

Users can update to the latest versions of iOS, iPadOS, macOS, or watchOS to address this vulnerability. Instructions for updating are available on the Apple Support website.