High Threat Security Alert (A23-04-04): Multiple Vulnerabilities in Apple iOS and iPadOS

Description:

Apple has released iOS 15.7.5, iOS 16.4.1, iPadOS 15.7.5 and iPadOS 16.4.1 to fix the vulnerabilities in various Apple devices. The list of vulnerability information can be found at:
https://support.apple.com/en-us/HT213720
https://support.apple.com/en-us/HT213723

Reports indicate that multiple vulnerabilities (CVE-2023-28205 and CVE-2023-28206) are being actively exploited. Users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• iPhone 6s and later, SE (1st generation)
• iPad 5th generation and later, Air 2 and later, mini (4th generation) and later, Pro (all models)
• iPod touch (7th generation)

Impact:

Successful exploitation of the vulnerabilities could lead to arbitrary code execution on an affected device.

Recommendation:

Apple has released new version of iOS and iPadOS to address the issue.

The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://support.apple.com/en-us/HT213720
• https://support.apple.com/en-us/HT213723
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28205 (to CVE-2023-28206)