Apple releases security update for iPhones that can’t get iOS 16
Apple has released an iOS and iPadOS 15 update for older phones and tablets. In it, a zero-day is repaired in WebKit. The update is for devices that cannot be updated to the latest version.
Apple has an update iOS and iPadOS 15.7.4 released. This is a security update for the operating system, which will be released at the same time as iOS 16.4. iOS 15.7.4 fixes multiple vulnerabilities that could, among other things, allow contacts to be read through accessibility features or an app to execute kernel-level code. A total of sixteen vulnerabilities have been fixed.
One of the vulnerabilities is a zero day. It’s about CVE-2023-23529. That’s a type confusion bug in WebKit. An attacker can use that bug to execute code on an iPhone via a phishing page. Apple says the bug was exploited in practice, but the company, as usual, is not giving details.
The update to iOS 15 is mainly for iPhones and iPads that cannot be updated to iOS 16 and must therefore remain on the old OS. These are the following models:
- iPhone 6s
- iPhone 7
- iPhone SE (first generation)
- iPad Air 2
- iPad mini (fourth generation)
- iPod touch (seventh generation)