Apple very recently rolled out security updates for iOS, iPadOS and MacOS. iOS 15.6.1 has been launched for the iPhone 6S or newer versions, and 7th gen iPod touch.
iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and newer, and iPad mini 4 or later have been given the iPadOS 15.6.1 update.
Those who use any Mac device are being asked to update to macOS Monterey 12.5.1. The software is being pushed over-the-air, of course.
All you need to do is open Settings, navigate to General, and then click on Software Update on your iPhone or iPad. Mac users can update their computer through System Preferences > Software Update.
According to Apple’s security notes, the updates come with fixes for CVE–2022–32894 and CVE-2022-32893, two code execution vulnerabilities exploited by attackers. The first could allow an application to execute arbitrary code with kernel privileges.
The second is a WebKit bug that could enable arbitrary code execution (meaning it could install malware on the victim’s device) even if they simply visited an innocent-looking web page which has been tinkered with.
As Naked Security explains, a cybercriminal who has gained access to your Apple device thanks to the aforementioned WebKit vulnerability could then take over the whole operating system kernel and gain administrative powers.
This would give the attacker the ability to secretly use your camera and mic, copy texts, spy on all your apps, take screenshots, track down your location and much more.
So update to the latest version of the software for iPhone, iPad and Mac without further delay.