蘋果緊急修補兩個已遭攻擊的零時差漏洞
· 2023-12-01
Google研究人員通報瀏覽器引擎WebKit二項安全漏洞可能已被利用，促使蘋果在11月30日緊急更新了Safari、iOS、iPadOS與macOS Sonoma
蘋果周四（11/30）緊急更新了Safari、iOS、iPadOS與macOS Sonoma，只為了修補兩個已遭到攻擊的零時差漏洞，根據《Bleeping Computer》的統計，這使得蘋果今年修補的零時差漏洞達到20個。
此次蘋果修補的兩個漏洞都藏匿在瀏覽器引擎WebKit中，其中的CVE-2023-42916為一越界讀取漏洞，在處理網頁內容時可能揭露機密資訊。而CVE-2023-42917則為記憶體毀損漏洞，處理網頁內容時可能導致任意程式執行。
這兩個漏洞都是由Google威脅分析小組（Threat Analysis Group，TAG）的安全研究人員Clément Lecigne 所發現，而且可能已經遭到攻擊。
受到波及的使用者可將軟體升級到Safari 17.1.2、iOS 17.1.2、iPadOS 17.1.2及macOS Sonoma 14.1.2。
Popular articles
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Indiana online casino bill stalls in House committee
Regulation
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Kazakhstan plans to penalise online casino promotions
Regulation
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
