
iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later.

The updates are available for the following devices. Users are advised to update to iOS 16.3.1, iPadOS 16.3.1, macOS Ventura 13.2.1, and Safari 16.3.1 to mitigate potential risks. Separately, the latest macOS update also plugs a privacy defect in Shortcuts that a malware-laced app can take advantage of to "observe unprotected user data." The problem, Apple noted, was fixed with improved handling of temporary files. Apple said it resolved the vulnerability with improved memory management.

WebKit flaws are also notable for the fact that they impact every third-party web browser that's available for iOS and iPadOS owing to Apple's restrictions that require browser vendors to use the same rendering framework.Īlso addressed by the company is a use-after-free issue in the Kernel (CVE-2023-23514) that could permit a rogue app to execute arbitrary code with the highest privileges.Ĭredited with reporting the issue are Xinru Chi of Pangu Lab and Ned Williamson of Google Project Zero.
