Apple has released critical security updates to address zero-day vulnerabilities found in Apple products.

The released security updates fix two zero-day vulnerabilities:

• CVE-2022-32917

• CVE-2022-32894

Security Risks

Malicious actors can exploit the zero-day vulnerabilities by remotely executing malicious code and taking control of an unpatched Apple device.

For the full list of security updates released by Apple, please refer to Apple Security Updates.     

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

1. Upgrade, as soon as possible, to the latest supported version of installed Apple software in order to continue receiving technical support and security patches.

The released software versions to upgrade to are the following:

• macOS Monterey 12.6: for MacBooks running macOS Monterey

• macOS Big Sur 11.7: for MacBooks running macOS Big Sur

• iOS 16: for iPhone 8 and later

• iOS 15.7: for iPhone 6S and later

• iPadOS 15.7: for iPad Pro (all models), iPad Air 2 and later, iPad 5^th generation and later, iPad mini 4 and later, and iPod touch (7^th generation)

2. To enable automatic background updates in macOS, go to System Preferences -> Software Update -> Advanced. In the window that pops up, select:

• Check for updates

• Download new updates when available

• Install system data files and security updates and then click OK.

3. To enable automatic updates in iOS or iPadOS, go to Settings -> General -> Software Update and turn on Automatic Updates.

4. Before any update task, ensure you have backup for your data.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009

References

Apple Security Updates