Apple has rolled out a series of patches for multiple vulnerabilities across its ecosystem, among them a critical zero-day discovered in the open source WebKit browser engine that forms the underpinnings of the Safari web browser.
CVE-2024-2322 is a type confusion issue in which processing maliciously crafted web content may enable a threat actor to achieve arbitrary code execution on the victim's device.
Apple is traditionally tight-lipped about vulnerabilities in its products, rarely offering more than barebones information to prevent more threat actors from attempting exploitation, and this is again the case for its first major security update of the year - the firm offered no further information as to the extent of exploitation, or whom might be behind it.
[
add
]
[
|
|
...
]