Apple wants you to install iOS 17.3 ASAP thanks to 16 security issues patched by the update

admin24 January 2024Last Update :
Apple wants you to install iOS 17.3 ASAP thanks to 16 security issues patched by the update

Apple wants you to install iOS 17.3 ASAP thanks to 16 security issues patched by the update،

The other day we told you that Apple released iOS 17.3 and told you that you should install it immediately due to the Stolen Device Protection feature that requires certain actions to be verified by Face ID or Touch ID when you are not at home. place like home or office. More sensitive actions such as changing the Apple ID password or resetting Face ID will now be delayed by one hour from when requests to perform these actions are made.
The hour gives an iPhone theft victim time to discover their iPhone was stolen and alert Apple of the theft. After the hour, Face ID or Touch ID will still be required to complete the sensitive action. Hopefully this will prevent criminals from using heavy-handed tactics to take possession of iPhones whose passcodes they know.

Once these bad actors take your phone, along with the passcode, they can turn it into their phone in seconds, mess with your financial apps, and use your credit card to buy expensive items. Just in case you missed the instructions on how to enable this feature, go to Settings > Face ID and passcode > and enable protection against stolen devices by tapping “Turn on protection”.

But Apple warns iPhone users that there are other reasons to install iOS 17.3 on your iPhone right away. On Apple Support Page, there are 16 other reasons, all vulnerabilities that can be exploited until you install the update and patch the flaws. For example, CVE-2024-23222, CVE-2024-23213, and CVE-2024-23214 are three vulnerabilities found in the WebKit browser engine that could allow an attacker to execute code.

Apple's support page says something about CVE-2024-23222 that might make the hairs on your neck stand up. The page says, “Apple is aware of a report that this issue may have been exploited,” to which we add, “Yeah! CVE-2024-23206 is another flaw involving Web Kit that could allow a malicious web page to fingerprint the user.

CVE-2024-23211, found in Safari, could allow a user's private browsing activity to be traced in settings. Other flaws fixed iOS 17.3 include:

  • CVE-2024-23212-Apple Neural Engine.
  • CVE-2024-23218-CoreCrypto.
  • CVE-2024-23208-Kernel.
  • CVE-2024-23207-Mail search.
  • CVE-2024-23223-NSSpellChecker.
  • CVE-2024-23219-Reset services.
  • CVE-2024-23203 and CVE-2024-23204-Shortcuts.
  • CVE-2024-23215-TCC.

To install the update, go to Settings > General > Software update and follow the directions.