Research · Jan 22, 2024
Apple Addresses WebKit Type Confusion Vulnerability Across Multiple Products
Apple has released critical updates to address a type confusion vulnerability in WebKit, impacting several of its products and potentially leading to arbitrary code execution.
What changed
Apple has resolved a significant type confusion vulnerability in WebKit that could allow maliciously crafted web content to execute arbitrary code. This issue has been addressed through improved checks and is included in several recent updates.
The fix was rolled out in Safari 17.3 and various versions of iOS, iPadOS, macOS, tvOS, and visionOS, ensuring a wide range of devices are protected.
Who is affected
The vulnerability affects a variety of Apple products, impacting both users and developers relying on these platforms for secure web browsing.
Specifically, the following are affected:
- Safari browser across multiple versions
- iOS devices running versions 15.8.7, 16.7.5, and 17.3
- iPadOS versions 15.8.7, 16.7.5, and 17.3
- macOS versions Monterey 12.7.3, Sonoma 14.3, and Ventura 13.6.4
What to do
Users are strongly encouraged to update their devices to the latest versions to mitigate the risks associated with this vulnerability. Regularly applying updates is crucial for maintaining security.
For those unable to upgrade to the latest iOS version, the updates that include the fix are available for download.