The
Indian Computer Emergency Response Team has issued a warning for all macOS users regarding a high severity vulnerability that can let remote hackers access sensitive information on the targeted system. The primary apps that have been affected by the same are Pages and Keynotes. Just a day ago, the agency also shared information related to a critical security issue on Google Chrome. Returning to macOS, let's examine the details, including target audience, risks, vulnerabilities, and strategies for staying safe.
MacOS Vulnerability: Affected Software Versions
Pages versions prior to 15.1Keynote versions prior to 15.1
MacOS Vulnerability: Target Audience, Risk, And Impact
As of now, the target of the exploit could be all the end-user organisations and individuals using macOS. The major risk of associated with the vulnerability is that all the affected users are at risk of getting their sensitive data compromised. As for the vulnerability, it exists in macOS due to an out-of-bounds read in the Paged component and an error in the QuickLook components. Now, a remote attacker can exploit any of these vulnerabilities by duping a victim into opening a specially crafted file. Once the vulnerability is successfully deployed, it can let the attacker get their hands on all the sensitive information available on the system.
Warning For Google Chrome Users Issued By CERT-IN Against Major Vulnerability, Here's How To Stay Safe
How To Stay Safe?
Apple has already started rolling out the patch notes for these affected versions, and you can soon download and update them to keep your MacBook away from any issues. Apart from that, you can also activate the auto-updates for macOS because with this you will be safe in most of the situations as these kinds of update patches will be downloaded and installed automatically on your system, keeping it secure from any vulnerabilities.