Apple released iOS 16.3.1 and macOS Ventura 13.2.1 to all users on Monday evening. While the company initially left unclear what the updates would change, it has now been revealed that macOS Ventura 13.2.1 fixes a security vulnerability in WebKit that was "actively exploited" by attackers.
According to an Apple support website fixes The macOS update contains a security vulnerability that affects WebKit - the engine behind Apple's web browser Safari. According to Apple, attackers are known to be able to exploit this vulnerability to execute arbitrary code. This is how the company describes the security update:
WebKit
- Available for: macOS Ventura
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple has received indications that this vulnerability can be actively exploited.
- Description: The type confusion issue has been resolved through improved checking.
The patch for the same vulnerability can also be obtained by users of older macOS versions. Apple has also released Safari 16.3.1 for macOS Big Sur and macOS Monterey. As expected, the update contains the same security patches like macOS Ventura 13.2.1. A similar security vulnerability was also closed for iPhone and iPad with the release of iOS 16.3.1.
iOS 16.3.1 & macOS 13.2.1 fix “actively exploited” WebKit vulnerability
Last month, Apple released macOS Ventura 13.2 with more than 20 security fixes that prevent apps from accessing sensitive user data, executing arbitrary code with kernel privileges, and more. The update also introduced the ability to set a physical key as a two-factor authentication method for Apple ID. Both macOS 13.2.1 and iOS 16.3.1 also address a number of other security vulnerabilities. Today's updates, for example, address a bug in the Shortcuts app that allowed apps to "observe unprotected user data." It's important to always keep your devices updated with the latest version of the operating system. You can download macOS Ventura 13.2.1 now from the Software Update menu in the System Preferences app. You can download iOS 16.3.1 from Settings > General > Software Update. (Photo by oqtave / Bigstockphoto)
