Apple Has Addressed A Zero-Day Vulnerability Which Is Being Actively Exploited In The Wild

Post author:Keshav R
Post published:February 8, 2022
Reading time:2 mins read
Post category:Endpoint Management / Endpoint Security / Endpoint Security and Management / Featured Articles / Security Research and Intelligence / Vulnerability Management

This year, Apple released security updates for their third zero-day vulnerability. The affected software processes maliciously crafted web content, leading to arbitrary code execution in WebKit, which is a component included in multiple products.

The recent updates for macOS and other Apple products include the fix for this vulnerability. It is named Use After Free exploit and is tracked as CVE-2022-22620 . As on February 2022, it is being actively exploited by malicious users across the globe.

Zero-Day (CVE-2022-22620)

Apple’s February security update fixed a critical zero-day vulnerability exploited in the wild. The vulnerability allows an attacker to send malicious web content leading to arbitrary code execution. It was discovered and reported by an anonymous researcher.

Affected OS:
macOS Monterey 12.2.1
iOS 15.3.1 and iPadOS 15.3.1
Safari 15.3*
Affected features: WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
CVEs: CVE-2022-22620

Solution

SanerNow VM and SanerNow PM detects the vulnerability and automatically fixes it by applying security update. Use SanerNow and keep your systems updated and secure.

Tags: code execution, critical remote code execution, cybersecurity, Denial Of Service, endpoint security, exploit, RCE, Security, Security Feature Bypass, Security Research, vulnerabilities, vulnerability, Vulnerability management, wildly exploited

Zero-Day (CVE-2022-22620)

Solution

You Might Also Like

ALERT: VLC Vetineri receives an important update

Oracle critical security patch