Apple Multiple Products Kernel Vulnerability Allowing Modification of Sensitive Kernel State

A vulnerability exists across various Apple operating systems, including iOS, iPadOS, macOS, tvOS, and watchOS, allowing apps to modify sensitive kernel state. This issue has been reported to have been actively exploited in versions of iOS prior to 15.7.1.

Impact

Exploitation of this vulnerability allows an app to alter sensitive kernel state, with potential implications for kernel memory management and process execution.

Remediation

Users can update to the latest versions of the respective operating systems to address this vulnerability. For macOS, this includes versions 12.6.8, 11.7.9, and 13.5. For iOS and iPadOS, the update is to version 16.6 or 15.7.8. Apple Watch users should update to watchOS 9.6, and Apple TV users should upgrade to tvOS 16.6.