One of the flaws was discovered by the University of Toronto's Citizen Lab and is linked to the Pegasus spyware.
In both instances, the company says it’s aware of at least one report where the vulnerabilities may have been actively exploited to execute arbitrary code. One relates to the CoreGraphics framework in iOS, iPadOS and macOS, while the other stems from Apple’s WebKit browser engine. As such, Apple recommends all users download them as soon as they can.ĭepending on the update, it addresses as many as two issues. All four are minor updates that don’t add new features to their respective operating systems but include important security fixes. One day before its next major event, Apple has released iOS 14.8, iPadOS 14.8, watchOS 7.6.2 and macOS Big Sur 11.6.