Update Now: iOS 18.6.2 and macOS Sequoia 15.6.1 Fix Actively Exploited Vulnerability - MacRumorsOpen MenuShow RoundupsShow Forums menuVisit ForumsOpen Sidebar
Skip to Content

Update Now: iOS 18.6.2 and macOS Sequoia 15.6.1 Fix Actively Exploited Vulnerability

by

Apple today released new iOS 18.6.2, iPadOS 18.6.2, and macOS Sequoia 15.6.1 updates, and the software addresses a security vulnerability that is known to have been actively exploited.

bug security vulnerability issue fix larry
According to Apple's security support documents, memory corruption could result from devices that were sent a malicious image file.

Apple says that it is aware of a report that the issue "may have been exploited in an extremely sophisticated attack against specific targeted individuals." This wording suggests that the average iPhone, iPad, and Mac user doesn't need to worry about being targeted with this attack, but it is still a good idea to update right away.

Apple addressed the issue with improved bounds checking, and the CVE credits Apple, indicating that Apple's internal teams found the bug and fixed it.

Along with iOS 18.6.2, iPadOS 18.6.2, and macOS Sequoia 15.6.1 updates, Apple has also released security fixes with iPadOS 17.7.10, macOS 14.7.8, and macOS 13.7.8.

Top Rated Comments

C
Corpuscle
8 months ago

Update is available now, bud.
i wonder why so many here go crazy if they don't see an update within 1 minute of the announcement.
Score: 8 Votes (Like | Disagree)
Reason077 Avatar
Reason077
8 months ago

I'd love to hear more details... what image file type is so complicated that it can be used as an attack vector?
File formats don’t have to be particularly complex to be vulnerable. Rather, the bugs are in the code that processes those files, not fundamental to file formats themselves.

In the past, there have been many security vulnerabilities/exploits found in code that processes various media formats, including JPEG, PNG, etc, across many different OSes.

When these bugs are found, a carefully-crafted malicious file can exploit the bug to execute arbitrary code and gain control of the app displaying the image (eg: Safari, mail, WhatsApp…)
Score: 7 Votes (Like | Disagree)
erthquake Avatar
erthquake
8 months ago

Already got a notification that this update is available for my iPhone.

But, how come no updates for iPadOS???
I'm downloading iPadOS 18.6.2 right now.
Score: 7 Votes (Like | Disagree)
S
Six Mac Abs
8 months ago

Is it safe to upgrade to Sequoia yet or should I wait until Tarhoe?
Tarwho?
Score: 6 Votes (Like | Disagree)
racerhomie Avatar
racerhomie
8 months ago

Maybe this is what the patch fixes? I mean, if there was going to be a backdoor, it’s already there by now.

I’m pretty sure the five eyes have a backdoor into iOS. Before anyone loses their mind, that’s just my opinion and obviously I have no evidence.
Even the CIA uses Apple devices in their operations. No one talks about it. And even the teams in the electronics warfare division have a certain respect for Apple stuff, as it’s not as easy to break in certain aspects. Hardware and software working together. It’s very expensive, simply put. And if you are still worried about such exploits you shouldn’t be on the internet with consumer level hardware and software
Score: 6 Votes (Like | Disagree)
C
Corpuscle
8 months ago

Already got a notification that this update is available for my iPhone.

But, how come no updates for iPadOS???
downloading it now. already did the ipad mini. next will to the big ipad. then the phone. then the two computers. it is and will be a fun day. For some reason, software updates excite me.
Score: 6 Votes (Like | Disagree)
Read All Comments