Thursday, February 6, 2025
HomeAppleApple Released Security Updates for iOS, Safari , tvOS, iTunes & Fixed...

Apple Released Security Updates for iOS, Safari , tvOS, iTunes & Fixed Several Vulnerabilities

Published on

SIEM as a Service

Follow Us on Google News

Apple released security updates along with iOS 12.2 release and fixed 51 security vulnerabilities that affected various Apple products including iOS, macOS, Safari, tvOS, iTunes, iCloud.

iOS 12.2 released with the several security fixes that affected FaceTime, GeoServices, file, WebKit, Wi-Fi, Siri, Kernel and other iOS components.

macOS Mojave 10.14.4 security updates fixed the various WebKit holes, and kernel flaws that allow maliciously crafted NFS network share may lead to arbitrary code execution with system privileges.

Safari 12.1 update fixed vulnerabilities in Safari Readers let maliciously crafted webpage may lead to universal cross site scripting due to improper validation.

tvOS 12.2 fixes covered in the Apple TV 4K and Apple TV HD security flaws, iOS update, GeoServices flaw and one affecting Siri (CVE-2019-8502).

In this case, 19 iOS vulnerabilities were discovered in the Webkit browser engine used by Safari, Mail, App Store and other apps on macOS, iOS and Linux.

https://twitter.com/patrickwardle/status/1110283016117473281

Apple Released Security Updates

Name and information linkAvailable forRelease date
iCloud for Windows 7.11Windows 7 and later25 Mar 2019
iTunes 12.9.4 for WindowsWindows 7 and later25 Mar 2019
Safari 12.1macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and Mojave 10.14.425 Mar 2019
macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 SierramacOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.325 Mar 2019
tvOS 12.2Apple TV 4K and Apple TV HD previously Apple TV (4th generation)25 Mar 2019
Xcode 10.2macOS High Sierra 10.13.6 and later25 Mar 2019
iOS 12.2iPhone 5s and later, iPad Air and later, and iPod touch 6th generation25 Mar 2019

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Also Read:

Multiple Malicious Fitness Tracker apps Abusing Apple’s Touch ID Feature To Steal Money From iOS Users

5 Things You Need To Do Before Selling iPhone

New Unpatched macOS Zero-day Flaw Allows Attackers to Read Passwords in Plain Text & System Data

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Abyss Locker Ransomware Attacking Critical Network Devices including ESXi servers

The Abyss Locker ransomware, a relatively new but highly disruptive cyber threat, has been...

Weaponized SVG Files With Google Drive Links Attacking Gmail, Outlook & Dropbox Users

A new wave of phishing attacks is leveraging Scalable Vector Graphics (SVG) files to...

Flesh Stealer Malware Attacking Chrome, Firefox, and Edge Users to Steal Passwords

A newly identified malware, Flesh Stealer, is rapidly emerging as a significant cybersecurity threat...

Beware of Nova Stealer Malware Sold for $50 on Hacking Forums

The cybersecurity landscape faces a new challenge with the emergence of Nova Stealer, a...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

F5 BIG-IP SNMP Flaw Allows Attackers to Launch DoS Attacks

A recently disclosed vulnerability in F5's BIG-IP systems has raised alarm within the cybersecurity...

Cisco IOS SNMP Vulnerabilities Allow Attackers to Launch DoS Attacks”

Cisco has disclosed multiple vulnerabilities in its Simple Network Management Protocol (SNMP) subsystem affecting...

MobSF Framework Zero-Day Vulnerability Allows Attackers to Trigger DoS in Scan Results

A recently discovered zero-day vulnerability in the Mobile Security Framework (MobSF) has raised alarms...