Apple fixes new zero-day flaw being actively exploited by hackers

Apple has fixed fresh vulnerabilities in iOS and macOS, including a zero-day flaw being actively exploited by hackers.

The zero-day flaw, known as CVE-2022-32917, allows a malicious app to run arbitrary code on an affected device with kernel privileges, Apple said in a security update.

Apple fixed the bug in updates for iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6 and macOS Big Sur 11.7.

Apple warned that it is aware that this flaw “may have been actively exploited”.

According to TechCrunch, this is the eighth zero-day vulnerability fixed by Apple this year.

In addition to these fixes, Apple also released a fix for a Safari browser flaw that could lead to address bar spoofing.