The official version of Apple iOS 14.4 fixes 3 "actively exploitable" security vulnerabilities: iPhone 6s and newer models need to be upgraded
In addition to the new features of the official version of Apple iOS 14.4, iOS 14.4 also brought three significant security improvements. In a new support document announced today, Apple stated that iOS 14.4 fixes a kernel vulnerability and two WebKit vulnerabilities, which "may have been actively exploited."
First, Apple said that iOS 14.4 fixes a security hole in the kernel, affecting iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (seventh generation). The company only provided a brief detailed description.
Impact: A malicious application may elevate permissions. Apple is aware of reports that this problem may have been actively exploited.
Explanation: By improving locking, a race condition has been resolved.
iOS 14.4 also fixes two vulnerabilities in WebKit (the browser engine used by Safari), which also affects the aforementioned devices.
Impact: A remote attacker may cause arbitrary code execution. Apple is aware of reports that this issue may have been actively exploited.
Description: A logic problem has been resolved, and restrictions have been improved.
As TechCrunch pointed out, it is unusual for Apple to state that a security breach "may have been actively exploited ." The company did not provide any information about which users may become victims.
It is not yet known which attackers are actively exploiting the vulnerability. According to the consulting report, Apple did not specify whether the attack was aimed at a small number of users or a broader attack. Apple anonymizes the individual who submitted the vulnerability.
Apple said it will provide more details about these vulnerabilities in the future, but no more information is currently available. Apple said that all three vulnerabilities were reported by anonymous security researchers.
Apple iOS 14.4 can be provided to users through OTA updates in the "Settings" app. Just open the "Settings" app, select "General", and then select "Software Update". Due to the inclusion of these major security improvements, it is strongly recommended that you update as soon as possible.
The camera recognizes a smaller QR code, and the iPhone 12 series detects unofficial camera parts
Apple officially pushed the iOS 14.4/iPadOS 14.4 system update to users, the version number is 18D52. IT Home is informed that this update supports the "camera" that can recognize smaller QR codes. In the iPhone 12 series, a notification function has been added when the camera on the iPhone cannot be verified as a brand new genuine Apple camera. Also fixed the possible artifacts in HDR photos taken by iPhone 12 Pro.
iOS 14.4 includes the following improvements for iPhone:
- "Camera" can recognize smaller QR codes
- Added an option to classify Bluetooth device types in "Settings", which can correctly identify the headset for audio notification
- In iPhone 12, iPhone 12 mini, iPhone 12 Pro, and iPhone 12 Pro Max, a notification function when the camera on the iPhone cannot be verified as a brand new genuine Apple camera has been added
This update also fixes the following issues:
- Artifacts may appear in HDR photos taken by iPhone 12 Pro
- "Fitness" widget may not display updated "Fitness Record" data
- Keyboard typing may be delayed and word suggestions may not appear
- "Info" may display the wrong keyboard language
- When "Switch Control" is enabled in "Accessibility", you may not be able to receive calls from the lock screen
0 Comments