UPDATED 20:57 EDT / MARCH 08 2021

SECURITY

Apple releases unexpected software updates to address vulnerability in WebKit

Apple Inc. today released software updates for its range of iPhone, iPad, Mac computers and the Apple Watch that address a vulnerability in the WebKit engine that powers the Safari browser.

The security updates to iOS 14.4.1, iPadOS 14.4.1, macOS 11.2.3 and watchOS 7.32 come a little over a month after the 14.4 release in January and addresses a “memory corruption issue” in WebKit, according to Apple. The vulnerability enables the ability to process maliciously crafted web content that can exploit the WebKit vulnerability to gain access to the device.

A Common Vulnerabilities and Exposures number has been created for the vulnerability — CVE-2021-1844 — but as of now, further details have not been disclosed. Apple credited the discovery of the vulnerability to Clément Lecigne of Google LLC’s Threat Analysis Group and Alison Huffman of Microsoft Corp.’s Browser Vulnerability Research team.

Although Apple as usual is a little vague on how serious the vulnerability is, its release of an update without going through developer or public testing suggests it’s a serious vulnerability that needed to be urgently addressed. The unexpected update also comes before the release of iOS 14.5, which is currently in its beta 3 build and is expected to be released sometime later this month.

Apple is encouraging all iPhone, iPad, Mac and Apple Watch users to install the update. The updates are available for iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, iPod touch (7th generation), macOS Big Sur and Apple Watch Series 3 and later.

The updates can be installed on iOS and iPad manually through the settings app. Mac users should navigate to the System Preferences menu. Apple Watch users can obtain the update by going to My Watch.

Photo: Pxhere

A message from John Furrier, co-founder of SiliconANGLE:

Your vote of support is important to us and it helps us keep the content FREE.

One click below supports our mission to provide free, deep, and relevant content.  

Join our community on YouTube

Join the community that includes more than 15,000 #CubeAlumni experts, including Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger, and many more luminaries and experts.

“TheCUBE is an important partner to the industry. You guys really are a part of our events and we really appreciate you coming and I know people appreciate the content you create as well” – Andy Jassy

THANK YOU