Empowering you to understand your world

Apple Releases Update For ACE Vulnerability In WebKit

Apple has released iOS 14.5.1, which provides a memory corruption bug fix and patches an arbitrary code execution (ACE) vulnerability in WebKit — a web browser engine. Arbitrary code execution refers to an attacker executing code that they should not be able to execute.

A malicious website could theoretically execute harmful code on your iPhone, or iPad if they exploited that vulnerability. Browsers are designed to limit the ability of websites to execute code that could be harmful to your device. However, hackers do sometimes find a way around that — and this is one such case.

Apple says that the vulnerability (CVE-2021-30663) may have been actively exploited and classifies it as important (which it is). The update (iOS 14.5.1) is now available, and you can look for it by going to Settings > General > Software Update.

The vulnerability also affects Macs, Apple Watches, and Apple TVs. There are updates for those as well.

Further Reading

Apple AirDrop Vulnerability Could Expose Users’ Phone Numbers, Emails

Giving Out Your E-mail Increases Your Chances Of Getting Hacked

Android’s Contract Tracing App Exposes Data

How To Buy Cryptocurrency (With An Emphasis On Security)

Share this article
Shareable URL
Prev Post

Epic Games Takes On Apple’s App Store Dominance

Next Post

eBay Considers NFTs, Explores The Possibility Of Accepting Cryptocurrency

Leave a Reply

Read next
Subscribe to our newsletter
Get notified when new content is published