Apple Inc. today released a software update for iPhones, iPads and Apple Watch users that patches several security issues.

The operating software versions iOS 14.3, iPadOS 14.3 and watchOS 8.4 first and foremost address a serious vulnerability that was revealed Jan. 17. In Apple’s Safari and related WebKit code, the vulnerability could leak a users’ identity and website history.

The vulnerability related to Safari 15’s implementation of the IndexedDB application programming interface. IndexedDB is a browser API for client-side storage designed to hold significant amounts of data and is found in many browsers.

The implementation involved Apple violating the “same-origin” policy that prevents documents and scripts in one location from interacting with content from another. As a result, a malicious website could find Google LLC account information and history from open tabs and windows.

Apple describes the Safari/WebKit patch in its iOS 15.3 release notes as “a website may be able to track sensitive user information” with the fix described as “a cross-origin issue in the IndexDB API was addressed with improved input validation.”

The IndexedDB vulnerability wasn’t the only thing patched in the release. Three other WebKit vulnerabilities were addressed along with issues with Model I/O, kernel, IOMobile Frame Buffer, iCloud, Crash Reporter and ColorSync.

“Apple’s recent security patches address vulnerabilities found not just in their laptop OS but their mobile operating systems as well,” Mike Parkin, engineer at enterprise cyber risk remediation company Vulcan Cyber Ltd., told SiliconANGLE. “While many organizations don’t always consider mobile operating systems part of their threat surface, with the increase in remote work, mobile devices are very much something they need to consider.”

John Bambenek, principal threat hunter at information technology and security operations firm Netenrich Inc. noted that zero-day vulnerabilities that allow remote code execution on mobile devices are among the most dangerous there are.

“Often, these types of bugs are used by this with significant ill-intent or by governments engaged in human rights abuses,” Bambenek said. “Unfortunately, we will likely see more of these bugs as the year goes on.”

Users of iPhones and iPads should go to the Settings app > General> Software Update and tap Install Now to install the update, CNET reported. Apple Watch users should go to Settings app > General > Software Update.

Image: Apple