Apple security updates released for this month and fixed several vulnerabilities that affected its products including iOS, Safari, iCloud, watchOS, tvOS, High Sierra.
Along with security updates, Apple released the latest version of iOS is 12.1.1, macOS is 10.14.2, tvOS is 12.1.1 and watchOS is 5.1.2.
There are several critical vulnerabilities are fixed in this updates including arbitrary code execution, address bar spoofing, denial of service attack, privilege escalations.
iOS 12.1.1 released with the critical bug fix for FaceTime locked screen contacts disclosure was discovered by security researcher Jose Rodriguez that allows a local attacker may be able to view contacts from the lock screen.
The Safari update fixes one important vulnerability that made it impossible for users to fully delete their browsing history.
A several arbitrary code execution vulnerability fixed that affected iCloud for Windows 7.9 and also Apple fixed several WebKit flaws and released Safari 12.0.2.
According to Apple, For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. This document lists recent releases.
| Name and information link | Available for | Release date |
|---|---|---|
| watchOS 5.1.2 | Apple Watch Series 1 and later | 06 Dec 2018 |
| iCloud for Windows 7.9 | Windows 7 and later | 05 Dec 2018 |
| Safari 12.0.2 | macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1 | 05 Dec 2018 |
| iTunes 12.9.2 for Windows | Windows 7 and later | 05 Dec 2018 |
| macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra | macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14.1 | 05 Dec 2018 |
| Shortcuts 2.1.2 for iOS | iOS 12.0 and later | 05 Dec 2018 |
| tvOS 12.1.1 | Apple TV 4K and Apple TV (4th generation) | 05 Dec 2018 |
| iOS 12.1.1 | iPhone 5s and later, iPad Air and later, and iPod touch 6th generation | 05 Dec 2018 |
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…