Apple Patches Two Security Vulnerabilities Impacting Mail App in iOS 13.4.5 Beta
San Francisco-based cybersecurity company ZecOps today announced that it has uncovered two zero-day security vulnerabilities affecting Apple's stock Mail app on iOS devices, as noted by Motherboard and The Wall Street Journal.
ZecOps claims that one of the vulnerabilities enables an attacker to remotely infect an iOS device by sending emails that consume a significant amount of memory, while another could allow remote code execution capabilities. Successful exploitation of the vulnerabilities is said to allow an attacker to leak, modify, and delete a user's emails.
Targets of the vulnerabilities have apparently included corporate executives and government officials rather than average end users.
The vulnerabilities are said to impact all software versions between iOS 6 and iOS 13.4.1. ZecOps said that Apple has patched the vulnerabilities in the latest beta of iOS 13.4.5, which should be publicly released within the coming weeks. In the meantime, ZecOps recommends using a third-party email app like Gmail or Outlook, which are apparently not impacted.
Popular Stories
Apple today announced the "HomeView," an all-new kind of smart home hub featuring a 7-inch Liquid Retina display and Siri AI.
Apple's senior vice president of Worldwide Marketing Greg Joswiak said:
Apple HomeView is designed to be shared by everyone in the home yet feel completely personal to each user. It recognizes your face to shift from a household screen to your own experience,...
Apple today announced the fourth-generation Apple TV 4K, with key features including an A19 chip, Siri AI support, an updated Siri Remote that has Find My support with Precision Finding, built in far-field microphones, support for surround sound with four HomePods in front and rear pairs, and more.
The A19 chip in the new Apple TV 4K delivers up to 50% faster CPU performance and up to twice...
MacRumors was first to reveal the name "HomeView" last week, after discovering a trademark filing from a secretive shell company that we correctly suspected was linked to Apple.
Apple was likely behind a "homeOS" trademark filing as well, but the company ultimately decided to stick with generic "HomeView software" naming, just like it refers to the HomePod's operating system as "HomePod...
