Bug fixes this week | Vulnerabilities in Apple, Microsoft, Google, and Samsung products fixed
The Hindu
Multiple high-severity security bugs were detected in Apple iOS, Microsoft Edge, Google Chrome, and Samsung Galaxy store app by CERT-In
The Indian Computer Emergency Response Team (CERT-In), released vulnerability notes for commonly used software detailing security bugs that could be exploited by cybercriminals to compromise the security of affected systems. Over the week, vulnerability notes were released for software from Microsoft, Google, Apple, and Samsung.
(For insights on emerging themes at the intersection of technology, business and policy, subscribe to our tech newsletter Today’s Cache.)
A security bug that could allow attackers to execute arbitrary code on the targeted devices was detected in Apple’s iOS-affecting versions before iOS 15.1.
The vulnerability was found to exist due to a type of confusion flaw in the WebKit component and could be exploited by enticing victims to visit a maliciously crafted website. Apple released an update fixing the vulnerability and advised users to update their software since the vulnerability was being actively exploited in the wild.
The security bug affected software on iPhones, iPads, and iPod touch.
Multiple high-severity security bugs were reported in Microsoft’s Edge (Chromium-based) browser.
The security bugs could be exploited by remote threat actors to gain elevated privileges and bypass security restrictions on targeted systems by escaping the browser’s sandbox, which is used to run web applications in isolation to ensure malware are unable to infect other areas of the system.













