Apple recently released iOS 15.6.1 and iPadOS 15.6.1 to the public. Although the release notes of the update generally mentioned that it contained security fixes, the support document for iOS 15.6.1 and iPadOS 15.6.1 security content of iOS lists the two vulnerabilities which may have been actively exploited in the wild.
Now patched, the Kernel and WebKit vulnerabilities gave access to attackers to execute arbitrary code or any command on the affected devices.
iOS 15.6.1 contains important security updates and is recommended to all users
The document lists that the security flaws were submitted by an anonymous researcher and the company is aware of reports that they were actively exploited. Therefore, the iOS 15.6.1 update is recommended for all to prevent malicious cyber attacks.
Both security patches are available for all devices compatible with iOS 15: iPhone 6s or later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation or later, iPad mini 4 or later, and iPod touch (7th generation).
Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2022-32894: an anonymous researcher
WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: An out-of-bounds write issue was addressed with improved bounds checking.
WebKit Bugzilla: 243557. CVE-2022-32893: an anonymous researcher
The company runs an Apple Security Bounty Program for security researchers to find and report flaws in its software updates to earn a reward of up to $100,000. However, several researchers have shared frustration with the program over the company’s silent treatment and not crediting the researchers.
Read More:
The 15.6 iOS was a nightmare on my iPhone 6s. My phone battery had 95%, was shut off at 10pm. At 7am, next morning, turned on and had 1% battery.
After charging, it went from 100% to 56% in 15 minutes.
FIXED…the 15.6.1 solved the problem. Phone at 93% last night. Set airplane mode. At 7am 89%. 12 hour later, 82%. Sweet!