Apple has rolled out a patch for iOS 16.5.1 and iPadOS 16.5.1 as part of its rapid security response program. The patch addresses a vulnerability found in the WebKit web browser engine, which has been assigned the identifier CVE-2023-37450.
The discovery of this vulnerability was credited to an anonymous researcher. According to Apple, the vulnerability could potentially lead to arbitrary code execution when processing web content. Furthermore, Apple acknowledged that there are reports suggesting active exploitation of this issue.
The rapid security response program is specifically designed to address zero-day vulnerabilities in iOS, iPadOS, and macOS outside of Apple’s regular patch cycle. This is the second time Apple has utilized this program, with the first response issued in May to tackle a different vulnerability.
By swiftly releasing this patch, Apple aims to protect its users from potential security risks associated with the WebKit vulnerability. Users are encouraged to update their iOS and iPadOS devices to the latest version to ensure they are protected against any potential exploitation.