# MA-947.062023: MyCERT Advisory - Apple Releases Security Updates for Multiple Products

**Date:** 27 Jun 2023  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-947.062023  
**Advisory ID:** MA-947.062023

---

**1.0 Introduction**
Recently, Apple has released security updates to address vulnerabilities in multiple products.
**2.0 Impact**
An attacker could exploit some of these vulnerabilities to take control of an affected device:
- [CVE-2023-32434](https://nvd.nist.gov/vuln/detail/CVE-2023-32434): An integer overflow vulnerability in the Kernel that could be exploited by a malicious app to execute arbitrary code with kernel privileges.
- [CVE-2023-32435](https://nvd.nist.gov/vuln/detail/CVE-2023-32435): A memory corruption vulnerability in WebKit that could lead to arbitrary code execution when processing specially crafted web content.
**3.0 Affected Products**
- [watchOS 8.8.1](https://support.apple.com/en-us/HT213808) - Apple Watch Series 3, Series 4, Series 5, Series 6, Series 7, and SE
- [macOS Big Sur 11.7.8](https://support.apple.com/en-us/HT213809)
- [macOS Monterey 12.6.7](https://support.apple.com/en-us/HT213810)
- [iOS 15.7.7 and iPadOS 15.7.7](https://support.apple.com/en-us/HT213811) - iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later
- [watchOS 9.5.2](https://support.apple.com/en-us/HT213812) -Apple Watch Series 4 and later
- [macOS Ventura 13.4.1](https://support.apple.com/en-us/HT213813)
- [iOS 16.5.1 and iPadOS 16.5.1](https://support.apple.com/en-us/HT213814) - iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation)
**4.0 Recommendations**
MyCERT encourages users and administrators to review the following advisories and apply the necessary updates.
Kindly refer to the following URLs:
- [watchOS 8.8.1](https://support.apple.com/en-us/HT213808) : <https://support.apple.com/en-my/HT213808>
- [macOS Big Sur 11.7.8](https://support.apple.com/en-us/HT213809) : <https://support.apple.com/en-my/HT213809>
- [macOS Monterey 12.6.7](https://support.apple.com/en-us/HT213810) : <https://support.apple.com/en-my/HT213810>
- [iOS 15.7.7 and iPadOS 15.7.7](https://support.apple.com/en-us/HT213811) : <https://support.apple.com/en-my/HT213811>
- [watchOS 9.5.2](https://support.apple.com/en-us/HT213812) : <https://support.apple.com/en-my/HT213812>
- [macOS Ventura 13.4.1](https://support.apple.com/en-us/HT213813) : <https://support.apple.com/en-my/HT213813>
- [iOS 16.5.1 and iPadOS 16.5.1](https://support.apple.com/en-us/HT213814) : <https://support.apple.com/en-my/HT213814>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
To update, please refer:
- Update your iPhone, iPad, or iPod touch: <https://support.apple.com/en-my/HT204204>
- Update Safari and macOS on Mac: <https://support.apple.com/en-my/HT201541>
- Enable background updates in macOS: <https://support.apple.com/en-my/HT207005>
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://www.cisa.gov/news-events/alerts/2023/06/22/apple-releases-security-updates-multiple-products>
- <https://thehackernews.com/2023/06/zero-day-alert-apple-releases-patches.html?m=1>
- <https://nvd.nist.gov/vuln/detail/CVE-2023-32434>
- <https://nvd.nist.gov/vuln/detail/CVE-2023-32435>
- <https://support.apple.com/en-my/HT201222>