[ad_1]
Apple has addressed shut to twenty vulnerabilities throughout the open provide WebKit browser engine that underpins its Safari browser, which might be present in its desktop and pocket guide, and cell working strategies.
The updates, which take Safari to mannequin 26.6.1 in macOS Sonoma and macOS Sequoia, macOS Tahoe to mannequin 26.6.2, and iOS and iPad OS to variations 18.7.10 and 26.6.1 respectively, have been all launched over the previous few days.
In widespread with most totally different software program program suppliers, the updates mark an enormous uptick throughout the amount of factors contained in Apple’s security fixes, and in accordance with Cupertino, 9 of them are attributed to a researcher using OpenAI Codex Security – a evaluation preview that connects to GitHub to help teams decide coding flaws – a clear demonstration of how artificial intelligence (AI) is upending the world of vulnerability discovery.
Left alone, the issues might end in a variety of unpleasant outcomes, along with browser and course of termination, memory corruption, and crashes. In a single event, a flaw tracked as CVE-2026-64778 in WebKit Historic previous might set off an individual lured to a maliciously crafted website online to inadvertently leak delicate data.
As is customary, Apple remained largely tight-lipped about whether or not or not or not any of the failings have been exploited throughout the wild, nevertheless WebKit flaws are generally highly-favoured by menace actors, as Adam Boynton, senior enterprise method supervisor at Jamf, outlined.
“[WebKit is] one among many largest assault surfaces on the [Apple] platform. Memory corruption doesn’t suggest distant code execution, nevertheless these have become browser exploit chains beforehand,” he outlined.
Nonetheless, added Boynton, the amount of WebKit flaws throughout the latest substitute won’t be basically probably the most noteworthy issue about it – the standout restore in his view is CVE-2026-65346, an integer overflow in ImageIO, a framework that permits functions to be taught and write image info.
“Exploiting it would allow an attacker to jot down down memory the place they shouldn’t and purchase code execution. Image parsing flaws have historically been the provision mechanism for zero-click spy ware concentrating on executives and totally different high-value folks,” talked about Boynton.
Moreover worth fast consideration is CVE-2026-65329, a telephony problem affecting iPhones which could enable an attacker with group privileges to bypass IPSec authentication and listen in on group guests.
Kev catalogue
Within the meantime, the US Cybersecurity and Infrastructure Security Firm (Cisa) has added one different Apple flaw – CVE-2026-65400 – to its Known Exploited Vulnerabilities (Kev) catalogue of factors deemed of significant hazard to the federal authorities.
CVE-2026-65400 was addressed by Apple earlier this month. It is one different improper authentication vulnerability that may allow a menace actor with a longtime presence on the aim group to authenticate to the aim system’s Show display Sharing operate with out legit credentials,.
Based mostly on the Dutch Nationwide Cyber Security Centre – NCSC-NL – it has been used in direction of a variety of strategies upon which port 5900 was uncovered to most of the people internet to accumulate root entry and arrange a Monero crypto miner.
As CVE-2026-65400 permits root entry, a menace actor may moreover use it as part of a wider assault to determine persistence, steal credentials and data, and deploy totally different malware, although on the time of writing there appears to be no indication that it has been utilized in any ransomware assaults.
Under an interior directive, US authorities firms are obligated to remediate CVE-2026-65400 by Friday 21 August – its inclusion on the usually updated Kev file is an indication that private sector CISOs should additionally take steps to remediate it within the occasion that they have not already.
[ad_2]
