Apple WebKit Type Confusion Vulnerability Allowing Arbitrary Code Execution

A type confusion vulnerability has been identified in WebKit, the rendering engine used by Apple Safari and other applications that process HTML. This vulnerability is present in multiple Apple products, including iOS 16.5.1, iPadOS 16.5.1, iOS 15.7.7, iPadOS 15.7.7, macOS Ventura 13.4.1, and Safari 16.5.1. The vulnerability arises from inadequate checks when processing maliciously crafted web content, which may lead to arbitrary code execution. Notably, this issue may have been actively exploited in the wild.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device or application.

Remediation

Users can upgrade to the latest versions of iOS, iPadOS, macOS Ventura, or Safari to address this vulnerability. Instructions for updating can be found on the Apple Support website.