Apple today released iOS 18.1.1, iPadOS 18.1.1, and macOS Sequoia 15.1.1, updates to its most current, iPhone, iPad, and Mac operating systems, respectively. Users are advised to install the updates as soon as possible, as they include fixes for actively exploited security vulnerabilities.
Apple says the updates address JavaScriptCore and WebKit vulnerabilities that have been actively exploited on some devices.
The JavaScriptCore vulnerability could be exploited by maliciously crafted web content, leading to arbitrary code execution. The WebKit vulnerability has the same problem with maliciously crafted web content, and it could lead to a cross-site scripting attack.
Apple is aware of reports that the above two issues may have been actively exploited on Intel-based Mac systems. While the vulnerabilities are only known to have been used against older Macs, other devices are also vulnerable to the attacks, as they have the same security flaws.