Skip to main content

Apple releases iOS 14.4.2 and iOS 12.5.2 to fix critical security vulnerability

Apple today released iOS 14.4.2 for iPhone and iPad, and watchOS 7.3.3 for Apple Watch. The updates includes an important security fix for WebKit, which Apple says may have been actively exploited.

The company also released a patch update to iOS 12, version 12.5.2, so that iPhone 6, iPhone 5s, third-generation iPad mini, first-generation iPad Air and the sixth-generation iPod touch users can also benefit from the security fixes.

Apple said that a bug in WebKit could allow malicious web site to perform activate arbitrary cross-site scripting. The company said it is aware of a report that this bug was being exploited in the wild.

This bug-fix update comes amidst ongoing developer beta seeds of the next major release, iOS 14.5, which we expect to be released to the public in April.

iOS 14.5 includes a handful of feature enhancements, most notably the ability to unlock your iPhone using your Apple Watch whilst wearing a face mask, circumventing a common grievance with Face ID. It will also introduce App Tracking Transparency, a new permissions dialogs that apps must show before they share user identifying information with third-parties.

Site default logo image

You can update to the latest version of iOS 14 now by going to Settings -> General -> Software Update on your devices.

FTC: We use income earning auto affiliate links. More.

You’re reading 9to5Mac — experts who break news about Apple and its surrounding ecosystem, day after day. Be sure to check out our homepage for all the latest news, and follow 9to5Mac on Twitter, Facebook, and LinkedIn to stay in the loop. Don’t know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Comments

Author

Avatar for Benjamin Mayo Benjamin Mayo

Benjamin develops iOS apps professionally and covers Apple news and rumors for 9to5Mac. Listen to Benjamin, every week, on the Happy Hour podcast. Check out his personal blog. Message Benjamin over email or Twitter.