# MA-850.082022: MyCERT Advisory - Apple Releases Security Update for iOS, iPadOS, macOS and Safari

**Date:** 20 Aug 2022  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-850.082022  
**Advisory ID:** MA-850.082022

---

**1.0 Introduction**
Apple has released security updates to address vulnerabilities in iOS devices.
|  |  |
| --- | --- | --- | --- | --- | **No.** | **CVE** | **Bug Type/Impact** | **Affected Devices** | **Severity** | 1 | CVE-2022-32893 | Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited | iOS  iPadOS  macOS  Safari | Critical | 2 | CVE-2022-32894 | An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited | iOS  iPadOS  macOS | Critical |
**2.0 Impact**
Exploitation of these vulnerabilities could potentially cause arbitrary code execution and acquiring administrative privilege which are considered as critical severity. On the unpatched devices attacker can remotely:
- Monitor any running apps
- Upload and execute apps that are not from App Store
- Access all files and folders on the device
- Change devices security settings
- Retrieve GPS location
- Take screenshots
- Use the device's cameras and take photo
- Activate and record from the microphone
- Copy messages
- Track your browsing history
and more.
**3.0 Affected Products**
3.1 iOS and iPadOS devices that support iOS 15 with iOS 15.6 and below version installed
- iPhone 6s and later
- iPad Pro (all models)
- iPad Air 2 and later
- iPad 5th generation and later
- iPad mini 4 and later
- iPod touch (7th generation)
3.2 macOS devices that support macOS Monterey with macOS 12.5 and below version installed on these devices
- iMac - Late 2015 and later
- iMac Pro - 2017 and later
- MacBook Air - Early 2015 and later
- MacBook Pro - Early 2015 and later
- Mac Pro - Late 2013 and later
- Mac mini - Late 2014 and later
- MacBook - Early 2016 and later
3.3 Safari version 15.6 or below running on macOS Big Sur and macOS Catalina on these devices
- 2015 and earlier MacBook
- 2013 and earlier MacBook Air
- Late 2013 and earlier MacBook Pro
- 2014 and earlier iMac
- 2017 and earlier iMac Pro
- 2014 and earlier Mac mini
- 2013 and earlier Mac Pro
**4.0 Recommendations**
We encourage users and administrators to review the Apple security updates website and apply the necessary updates:
- Apple security updates: <https://support.apple.com/en-my/HT201222>
- About the security content of Safari 15.6.1: <https://support.apple.com/en-my/HT213414>
- About the security content of macOS Monterey 12.5.1: <https://support.apple.com/en-my/HT213413>
- About the security content of iOS 15.6.1 and iPadOS 15.6.1: <https://support.apple.com/en-my/HT213412>
To update, please refer:
- Update your iPhone, iPad, or iPod touch: <https://support.apple.com/en-my/HT204204>
- Update Safari and macOS on Mac: <https://support.apple.com/en-my/HT201541>
- Enable background updates in macOS: <https://support.apple.com/en-my/HT207005>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0  References**
- Apple security updates: <https://support.apple.com/en-my/HT201222>
- About the security content of Safari 15.6.1: <https://support.apple.com/en-my/HT213414>
- About the security content of macOS Monterey 12.5.1: <https://support.apple.com/en-my/HT213413>
- About the security content of iOS 15.6.1 and iPadOS 15.6.1: <https://support.apple.com/en-my/HT213412>
- Update your iPhone, iPad, or iPod touch: <https://support.apple.com/en-my/HT204204>
- Update macOS on Mac: <https://support.apple.com/en-my/HT201541>
- About background updates in macOS: <https://support.apple.com/en-my/HT207005>
- Apple releases iOS 15.6.1 and macOS Monterey 12.5.1, here's what's new - <https://www.xda-developers.com/ios-15-6-1-macos-12-5-1/>
- Apple patches double zero-day in browser and kernel – update now! - <https://nakedsecurity.sophos.com/2022/08/18/apple-patches-double-zero-day-in-browser-and-kernel-update-now/>