Apple Vision Pro出貨前夕，蘋果修補visionOS零時差漏洞
· 2024-02-04
針對已遭攻擊者利用的瀏覽器引擎WebKit零時差漏洞CVE-2024-23222，蘋果針對受影響的iPhone、iPad、Mac電腦、Apple TV以及新上市的MR裝置Apple Vision Pro發布作業系統更新
visionOS示意圖（／蘋果）
Apple Vision Pro第一批訂單即將出貨之際，蘋果釋出visionOS 1.0.2，修補一個可能已遭到濫用的漏洞。
訂價3,499美元起跳的Vision Pro於1月21日開放在美預購，預計本周五（2/2）出貨第一批。不過首波較晚預購者，必須再等5到6周才領得到貨。
修補的漏洞編號CVE-2023-23222，為一型態混淆漏洞，出在瀏覽器引擎WebKit特定元件對惡意內容驗證不足。攻擊者可設立惡意網頁，誘使受害者以Safari瀏覽器造訪，進而在Vision Pro上執行任意程式碼。蘋果表示，已接獲通報漏洞遭到濫用。
更新版強化對網頁內容的檢查。對開發人員而言，修補程式已包含在visionOS 1.0.1版本釋出，但一般消費者則會獲得visionOS 1.0.2，他們必須在開始使用Vision Pro之前，先從visionOS 1.0升級到visionOS 1.0.2。
CVE-2024-23222也影響iPhone、iPad、Mac電腦及Apple TV。上周蘋果已釋出iOS 17.3、ipadOS 17.3、macOS 14.3及tvOS 17.3，解決包含CVE-2024-23222在內的多項漏洞。
這波針對WebKit的攻擊背後策動者為誰，攻擊目標與理由為何，以及本漏洞由誰發現，蘋果皆未說明。
Popular articles
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
