Apple has recently released security patches for 90 of its services and operating systems, fixing some critical vulnerabilities. The security update, released on October 29, included all Apple operating systems (macOS, iOS, iPadOS, watchOS, tvOS, visionOS) as well as Apple services such as Safari and iTunes. It is essential to keep software up to date to maintain Apple product security. One of the critical vulnerabilities patched could allow an attacker to access information about your contacts, read sensitive location information via Apple's Find My service, and leak sensitive kernel state. In another critical vulnerability, a malicious image could lead to denial-of-service (DoS) attacks. A third could lead an attacker to bypass the Login Window when a software update occurs if they get physical access to your Mac. Safari's Private Browsing mode could also leak browsing history. Apple noted that on iOS and iPadOS, someone with physical access to your device might be able to view private information, even if it's locked. This includes contact photos, which could be exposed due to a vulnerability involving Siri. Users are urged to update their Apple devices as soon as possible. Apple did not mention if these vulnerabilities were being targeted in the wild.
