Apple WebKit Arbitrary Code Execution Vulnerability

A vulnerability in the WebKit component of multiple Apple products, including iOS, iPadOS, macOS, and Safari, allows for arbitrary code execution. This issue arises from a use-after-free vulnerability that can be exploited by processing maliciously crafted web content. Apple has acknowledged reports of this vulnerability being actively exploited in the wild on versions of iOS prior to 16.7.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

This vulnerability has been fixed in macOS Sonoma 14. Users should upgrade to this version. For iOS and iPadOS, the vulnerability is addressed in version 17.0.1. Safari users should upgrade to version 16.6.1.