Security News > 2024 > May > Apple backports fix for zero-day exploited in attacks to older iPhones
Apple has backported security patches released in March to older iPhones and iPads, fixing an iOS zero-day tagged as exploited in attacks.
Apple has yet to disclose who disclosed the zero-day or whether it was discovered internally, and it has provided no information on the nature of the attacks exploiting it in the wild.
Even though Apple has not released details regarding CVE-2024-23296 exploitation, iOS zero-days are commonly used in state-sponsored spyware attacks targeting high-risk individuals, including journalists, dissidents, and opposition politicians.
In January, Apple also backported patches for two WebKit zero-days, which were patched in November for newer devices.
Google fixes fifth Chrome zero-day exploited in attacks this year.
Microsoft fixes two Windows zero-days exploited in malware attacks.
News URL
Related news
- Apple backports fix for RTKit iOS zero-day to older iPhones (source)
- Google fixes fifth Chrome zero-day exploited in attacks this year (source)
- Apple backports iOS zero-day patch, adds Bluetooth tracker alert (source)
- Apple fixes Safari WebKit zero-day flaw exploited at Pwn2Own (source)
- Microsoft fixes Windows zero-day exploited in QakBot malware attacks (source)
- Check Point releases emergency fix for VPN zero-day exploited in attacks (source)
- Check Point Warns of Zero-Day Attacks on its VPN Gateway Products (source)
- Check Point VPN zero-day exploited in attacks since April 30 (source)
- Apple to unveil new 'Passwords' password manager app for iPhones, Macs (source)
- Black Basta ransomware gang linked to Windows zero-day attacks (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-03-05 | CVE-2024-23296 | Out-of-bounds Write vulnerability in Apple products A memory corruption issue was addressed with improved validation. | 7.8 |