Make Sure to Update: iOS 18.1.1 and macOS Sequoia 15.1.1 Fix Actively Exploited Vulnerabilities - MacRumorsOpen MenuShow RoundupsShow Forums menuVisit ForumsOpen Sidebar
Skip to Content

Make Sure to Update: iOS 18.1.1 and macOS Sequoia 15.1.1 Fix Actively Exploited Vulnerabilities

by

The iOS 18.1.1, iPadOS 18.1.1, and macOS Sequoia 15.1.1 updates that Apple released today address JavaScriptCore and WebKit vulnerabilities that Apple says have been actively exploited on some devices.

bug security vulnerability issue fix larry
With the JavaScriptCore vulnerability, processing maliciously crafted web content could lead to arbitrary code execution. The WebKit vulnerability had the same issue with maliciously crafted web content, and it could lead to a cross site scripting attack.

Apple says that it is aware of reports that these two issues may have been actively exploited on Intel-based Mac systems. While the vulnerabilities are only known to have impacted older Macs, other devices are vulnerable to attack because they have the same security flaws.

For that reason, it is a good idea to update your devices to the latest software as soon as possible.

Related Forums: iOS 18, iPadOS 18, macOS Sequoia

Top Rated Comments

I
ignatius345
18 months ago
Whatever happened to those Rapid Security Response patches they were supposed to be able to deploy quickly? Are those being used? I see so many urgent system updates, but I can't remember getting a Rapid Security Response thing automatically.
Score: 20 Votes (Like | Disagree)
TheDailyApple Avatar
TheDailyApple
18 months ago
Do these vulnerabilities affect iOS 17.x.x and macOS 14.x.x?
Score: 11 Votes (Like | Disagree)
Yvan256 Avatar
Yvan256
18 months ago
And yet, ads on iOS can open a browser without our authorization if we touch anywhere on their full-screen videos, or touch one pixel outside their tiny 16×16 pixels "close" button.

Apple really needs to take over the ads with their own standard interface layered on top of the ads, and prompt us if we really want to open a URL in the browser.
Score: 8 Votes (Like | Disagree)
Lizzard899 Avatar
Lizzard899
18 months ago
They didnt fix any bugs....I feel like they just pushed it out for Thanksgiving. IOS 18 has been a mess. Messed up icloud storage (doesn't collabrate the correct number), issues with messages app where messages show up as group text when its only 1 single text between me and 1 other person. The list goes on and on. I bet the notes app isn't fixed either
Score: 7 Votes (Like | Disagree)
Reason077 Avatar
Reason077
18 months ago

Whatever happened to those Rapid Security Response patches they were supposed to be able to deploy quickly? Are those being used? I see so many urgent system updates, but I can't remember getting a Rapid Security Response thing automatically.
I guess there is a particularly high bar of severity in order to justify deploying a rapid response fix. This type of automatic, forced update is high-risk, as demonstrated by the CrowdStrike incident earlier this year. Apple would need to be certain that any exploit is severe enough and urgent enough to justify the potential downsides.
Score: 4 Votes (Like | Disagree)
decafjava Avatar
decafjava
18 months ago

They didnt fix any bugs....I feel like they just pushed it out for Thanksgiving. IOS 18 has been a mess. Messed up icloud storage (doesn't collabrate the correct number), issues with messages app where messages show up as group text when its only 1 single text between me and 1 other person. The list goes on and on. I bet the notes app isn't fixed either
Not supposed to I understand, just plug a vulnerability.
Score: 4 Votes (Like | Disagree)
Read All Comments