Apple Addresses Exploited Zero-Day Vulnerabilities with Emergency Security Update: CVE-2023-42916, CVE-2023-42917

Apple has released emergency security updates to counteract two zero-day vulnerabilities actively exploited in the wild. Tracked as CVE-2023-42916 and CVE-2023-42917, these vulnerabilities affect the WebKit browser engine on iPhone, iPad, and Mac devices.

Significantly, Apple emerged as the second most targeted vendor in this year’s review of the CISA Known Exploited Vulnerabilities (KEV) catalog, following Microsoft. These zero-day vulnerabilities contribute to Apple’s KEV score, with two more additions yet to be accounted for.

Vulnerability Details

Apple defines the first …

actively exploited addresses apple browser cve cve-2023-42916 cve-2023-42917 devices emergency engine exploited ipad iphone mac review security security update security updates update updates vendor vulnerabilities webkit zero-day zero-day vulnerabilities