Apple has released security updates to fix vulnerabilities including a zero-day (CVE-2022-42856) in multiple products.

Affected systems

iOS, iPadOS, macOS, watchOS, tvOS and Safari web browser.

Security Risks

This vulnerability may result in execution of malicious code on an unpatched device.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and administrators to:

1. Apply Apple security updates as soon as possible. The latest required updates to install accordingly are:

• iOS 15.7.3 and iPadOS 15.7.2

• iOS 16.2 and iPadOS 16.2

• macOS Big Sur 11.7.2

• macOS Monterey 12.6.2

• macOS Ventura 13.1

• Safari 16.2

• watchOS 9.2

• tvOS 16.2

2. To enable automatic background updates in macOS, go to System Preferences -> Software Update -> Advanced. In the window that pops up, select:

1. Check for updates

2. Download new updates when available

3. Install system data files and security updates and then click OK.

3. To enable automatic updates in iOS or iPadOS, go to Settings -> General -> Software Update and turn on Automatic Updates.

For further information and support, please contact NCSA by email at rwcsirt@ncsa.gov.rw  or call us on 9009.

References

https://support.apple.com/en-us/HT201222