{"id":202,"date":"2022-01-27T11:09:49","date_gmt":"2022-01-27T03:09:49","guid":{"rendered":"http:\/\/down.cdhaha.net\/?p=202"},"modified":"2022-01-27T11:09:49","modified_gmt":"2022-01-27T03:09:49","slug":"ios","status":"publish","type":"post","link":"http:\/\/down.cdhaha.net\/?p=202","title":{"rendered":"iOS \/ iPadOS 15.3"},"content":{"rendered":"

\"iOS\"<\/a>iOS (formerly iPhone OS) is a mobile operating system created and developed by Apple Inc. exclusively for its hardware. It is the operating system that powers many of the company’s mobile devices, including the iPhone and iPod Touch; the term also included the versions running on iPads until the name iPadOS was introduced with version 13 in 2019. It is the world’s second-most widely installed mobile operating system, after Android. It is the basis for three other operating systems made by Apple: iPadOS, tvOS, and watchOS. It is proprietary software, although some parts of it are open source under the Apple Public Source License and other licenses.<\/p>\n

Unveiled in 2007 for the first-generation iPhone, iOS has since been extended to support other Apple devices such as the iPod Touch (September 2007) and the iPad (introduced: January 2010; availability: April 2010.) As of March 2018, Apple’s App Store contains more than 2.1 million iOS applications, 1 million of which are native for iPads. These mobile apps have collectively been downloaded more than 130 billion times.<\/p>\n

Major versions of iOS are released annually. The current stable version, iOS 15, was released to the public on September 20, 2021
\n<\/p>\n

iOS 15.3 and iPadOS 15.3<\/p>\n

Released January 26, 2022<\/p>\n

ColorSync<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: Processing a maliciously crafted file may lead to arbitrary code execution<\/p>\n

Description: A memory corruption issue was addressed with improved validation.<\/p>\n

CVE-2022-22584: Mickey Jin (@patch1t) of Trend Micro<\/p>\n

Crash Reporter<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: A malicious application may be able to gain root privileges<\/p>\n

Description: A logic issue was addressed with improved validation.<\/p>\n

CVE-2022-22578: an anonymous researcher<\/p>\n

iCloud<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: An application may be able to access a user’s files<\/p>\n

Description: An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization.<\/p>\n

CVE-2022-22585: Zhipeng Huo (@R3dF09) of Tencent Security Xuanwu Lab (https:\/\/xlab.tencent.com)<\/p>\n

IOMobileFrameBuffer<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.<\/p>\n

Description: A memory corruption issue was addressed with improved input validation.<\/p>\n

CVE-2022-22587: an anonymous researcher, Meysam Firouzi (@R00tkitSMM) of MBition – Mercedes-Benz Innovation Lab, Siddharth Aeri (@b1n4r1b01)<\/p>\n

Kernel<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: A malicious application may be able to execute arbitrary code with kernel privileges<\/p>\n

Description: A buffer overflow issue was addressed with improved memory handling.<\/p>\n

CVE-2022-22593: Peter Nguy\u1ec5n V\u0169 Ho\u00e0ng of STAR Labs<\/p>\n

Model I\/O<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution<\/p>\n

Description: An information disclosure issue was addressed with improved state management.<\/p>\n

CVE-2022-22579: Mickey Jin (@patch1t) of Trend Micro<\/p>\n

WebKit<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: Processing a maliciously crafted mail message may lead to running arbitrary javascript<\/p>\n

Description: A validation issue was addressed with improved input sanitization.<\/p>\n

CVE-2022-22589: Heige of KnownSec 404 Team (knownsec.com) and Bo Qu of Palo Alto Networks (paloaltonetworks.com)<\/p>\n

WebKit<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: Processing maliciously crafted web content may lead to arbitrary code execution<\/p>\n

Description: A use after free issue was addressed with improved memory management.<\/p>\n

CVE-2022-22590: Toan Pham from Team Orca of Sea Security (security.sea.com)<\/p>\n

WebKit<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: Processing maliciously crafted web content may prevent Content Security Policy from being enforced<\/p>\n

Description: A logic issue was addressed with improved state management.<\/p>\n

CVE-2022-22592: Prakash (@1lastBr3ath)<\/p>\n

WebKit Storage<\/p>\n

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)<\/p>\n

Impact: A website may be able to track sensitive user information<\/p>\n

Description: A cross-origin issue in the IndexDB API was addressed with improved input validation.<\/p>\n

CVE-2022-22594: Martin Bajanik of FingerprintJS<\/p>\n

https:\/\/support.apple.com\/en-us\/HT213053<\/p>\n

For iPhone 13 Pro Max<\/span><\/a>
<\/div><\/div>\n
For iPhone 13 Pro<\/span><\/a>
<\/div><\/div>\n
For iPhone 13<\/span><\/a>
<\/div><\/div>\n
For iPhone 13 Mini<\/span><\/a>
<\/div><\/div>\n
For iPhone 12 Pro Max<\/span><\/a>
<\/div><\/div>\n
For iPhone 12 Pro<\/span><\/a>
<\/div><\/div>\n
For iPhone 12<\/span><\/a>
<\/div><\/div>\n
For iPhone 12 Mini<\/span><\/a>
<\/div><\/div>\n
For iPhone 11 Pro Max<\/span><\/a>
<\/div><\/div>\n
For iPhone 11 Pro<\/span><\/a>
<\/div><\/div>\n
For iPhone 11<\/span><\/a>
<\/div><\/div>\n
For iPhone XS Max<\/span><\/a>
<\/div><\/div>\n
For iPhone XS<\/span><\/a>
<\/div><\/div>\n
For iPhone XR<\/span><\/a>
<\/div><\/div>\n
For iPhone X<\/span><\/a>
<\/div><\/div>\n
For iPhone 8\/7<\/span><\/a>
<\/div><\/div>\n
For iPhone 8 Plus\/7 Plus<\/span><\/a>
<\/div><\/div>\n
For iPhone SE 2<\/span><\/a>
<\/div><\/div>\n
For iPhone SE<\/span><\/a>
<\/div><\/div>\n
For iPhone 6S Plus<\/span><\/a>
<\/div><\/div>\n
For iPhone 6S<\/span><\/a>
<\/div><\/div>\n
For iPod Touch Gen7<\/span><\/a>
<\/div><\/div>\n
For 12.9-inch iPad Pro Gen5<\/span><\/a>
<\/div><\/div>\n
For 12.9-inch iPad Pro Gen4<\/span><\/a>
<\/div><\/div>\n
For 12.9-inch iPad Pro Gen3<\/span><\/a>
<\/div><\/div>\n
For 12.9-inch iPad Pro Gen2<\/span><\/a>
<\/div><\/div>\n
For 12.9-inch iPad Pro Gen1<\/span><\/a>
<\/div><\/div>\n
For 11-inch iPad Pro Gen3<\/span><\/a>
<\/div><\/div>\n
For 11-inch iPad Pro Gen2<\/span><\/a>
<\/div><\/div>\n
For 11-inch iPad Pro Gen1<\/span><\/a>
<\/div><\/div>\n
For 10.5-inch iPad Pro<\/span><\/a>
<\/div><\/div>\n
For 9.7-inch iPad Pro<\/span><\/a>
<\/div><\/div>\n
For iPad Gen5<\/span><\/a>
<\/div><\/div>\n
For iPad Gen6<\/span><\/a>
<\/div><\/div>\n
For iPad Gen7<\/span><\/a>
<\/div><\/div>\n
For iPad Gen8<\/span><\/a>
<\/div><\/div>\n
For iPad Gen9<\/span><\/a>
<\/div><\/div>\n
For iPad Air Gen2<\/span><\/a>
<\/div><\/div>\n
For iPad Air Gen3<\/span><\/a>
<\/div><\/div>\n
For iPad Air Gen4<\/span><\/a>
<\/div><\/div>\n
For iPad Mini Gen4<\/span><\/a>
<\/div><\/div>\n
For iPad Mini Gen5<\/span><\/a>
<\/div><\/div>\n
For iPad Mini Gen6<\/span><\/a>
<\/div><\/div>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

iOS (formerly iPhone OS) is a mobile operating system created and developed by Apple Inc. exclusively for its hardware. It…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[75],"tags":[106,654],"_links":{"self":[{"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/posts\/202"}],"collection":[{"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=202"}],"version-history":[{"count":0,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=\/wp\/v2\/posts\/202\/revisions"}],"wp:attachment":[{"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=202"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/down.cdhaha.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}