iOS 17.0.1 brings fixes for exploited security issues

Apple has released emergency security patches for iOS 17, on the very day that the iPhone 15 series is available to customers. The update is aimed at fixing several zero-day vulnerabilities that could leave a device open to malicious attacks.

The security update addresses three critical vulnerabilities, and Apple warns that it is aware of reports that the trio may have been actively exploited against versions of the iPhone operating system before iOS 16.7.

Owners of the new iPhone 15 will find iOS 17.0.2 available to upgrade to, while users of older iPhones will find iOS 17.0.1. Apple Watch users will get WatchOS 10.0.1.

Apple has also released iOS 16.7 for those who have not yet updated to iOS 17, or for those with older iPhones who are unable to update.

Given that all three of these vulnerabilities are known to have been exploited already, it is imperative that users update to the patched versions of iOS, iPadOS and watchOS as soon as possible.

Security Fixes

Kernel

Impact: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Description: The issue was addressed with improved checks.

Security

Impact: A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Description: A certificate validation issue was addressed.

WebKit

Impact: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.