CVE-2023-23529 is the first zero-day vulnerability for Apple in 2023.

https://www.cisa.gov/uscert/ncas/current-activity/2023/02/14/apple-releases-security-updates-multiple-products
Attackers took control of Apple devices that visited a malicious web site.

The Cyber security and infrastructure security agency issues warnings at National Cyber Awareness System > Current Activity > Apple Vulnerabilities
For Safari 16.3.1 https://support.apple.com/en-us/HT213638
iOS 16.3.1 and iPadOS 16.3.1 https://support.apple.com/en-us/HT213635
macOS 13.2.1 https://support.apple.com/en-us/HT213633

The Citizen Lab at The University of Toronto's Munk School notified Apple
that this vulnerability was actively exploited.

Apple has confirmed the exploits using the word "may" have been exploited.
The word "may" is applespeak for an active exploit reported to Apple,
the argument being realistic that Apple has to accept the reporters word.


https://www.gizchina.com/2023/02/14/apple-officially-confirms-the-exploitation-of-an-iphone-bug-here-is-what-to-do/
https://www.siliconrepublic.com/enterprise/apple-iphone-ipad-zero-day-vulnerability
https://www.engadget.com/update-your-apple-devices-now-to-patch-a-security-flaw-185718120.html
https://www.securityweek.com/apple-patches-exploited-ios-vulnerability-in-old-iphones/
https://www.macrumors.com/2023/02/15/update-your-iphone-now-to-fix-nasty-vulnerability/
https://www.intego.com/mac-security-blog/apple-issues-macos-ventura-13-2-1-ios-16-3-1-to-fix-zero-day-vulnerability/
https://www.malwarebytes.com/blog/news/2023/02/update-now-apple-patches-vulnerabilities-in-macos-and-ios
https://www.secureworld.io/industry-news/apple-security-update-patch-zero-day https://tech.hindustantimes.com/tech/news/iphone-14-iphone-13-ipad-mac-users-beware-bug-puts-your-iphones-and-more-at-risk-71676439857493.html
https://www.itechpost.com/articles/116506/20230214/apple-issues-update-patch-out-actively-exploited-vulnerability.htm
https://www.bleepingcomputer.com/news/security/apple-fixes-new-webkit-zero-day-exploited-to-hack-iphones-macs/

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 2023-02-15, NewsKrawler <[email protected]> wrote:

CVE-2023-23529

What about iOS 15 patches?

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 2023-02-15, Incubus <[email protected]> wrote:

CVE-2023-23529

What about iOS 15 patches?

You have to ask Apple that question because nobody has seen an iOS 15 fix.
So far the patches are only for the latest iOS 16 and macOS 13 releases.

https://www.forbes.com/sites/kateoflahertyuk/2023/02/14/ios-1631-update-now-warning-issued-to-iphone-users/
"If you are on iOS 15 but have an iOS 16-compatible iPhone, now may be the
time to update to iOS 16.3.1"

https://www.ntd.com/federal-agency-warns-millions-of-iphone-users-to-change-settings-now_901545.html
"If your Apple product isn't on the list, notably if you're stuck back on
iOS 15 or iOS 12, there's nothing you can do right now, but we suggest
keeping an eye on Apple's HT201222 page in case your product does get an
update in the next few days"

https://nakedsecurity.sophos.com/2023/02/14/apple-fixes-zero-day-spyware-implant-bug-patch-now/
"As we've seen before, mobile devices still using iOS 15 and iOS 12 get nothing, but whether that's because they're immune to this bug or simply
that Apple hasn't got round to patching them yet... we don't know..."

https://www.intego.com/mac-security-blog/apple-issues-macos-ventura-13-2-1-ios-16-3-1-to-fix-zero-day-vulnerability/
"Notably, Apple has not yet released a corresponding patch for iOS 15 or
iPadOS 15. This is significant, because many people still use iPhones and
iPads that cannot be upgraded to iOS 16 or iPadOS 16. Additionally, the
iPod touch (7th generation), which had just barely been discontinued in May 2022 before iOS 16 was announced in June, cannot be upgraded to iOS 16,
either"

https://www.macworld.com/article/1511605/ios-ipados-16-3-1-macos-ventura-13-2-1-safari-zero-day.html
"It's not clear whether there's an update coming to fix the flaw coming for
iOS 15 devices this week as well"

https://www.hackread.com/update-apple-ios-devices-security-updates/
"It is also unclear if a fix will be released for iOS 15 devices"

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

NewsKrawler wrote:

On 2023-02-15, Incubus <[email protected]> wrote:

CVE-2023-23529

What about iOS 15 patches?

You have to ask Apple that question because nobody has seen an iOS 15 fix.
So far the patches are only for the latest iOS 16 and macOS 13 releases.

If your telephone can't run ios 16, it's time to buy a new one.

Apple does not support older telephones.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 2023-02-15 16:10, Hank Rogers wrote:

NewsKrawler wrote:

On 2023-02-15, Incubus <[email protected]> wrote:

CVE-2023-23529

What about iOS 15 patches?

You have to ask Apple that question because nobody has seen an iOS 15
fix.
So far the patches are only for the latest iOS 16 and macOS 13 releases.

If your telephone can't run ios 16, it's time to buy a new one.

Apple does not support older telephones.

Sorry, but that's just false.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 15 Feb 2023, Hank Rogers <[email protected]d> wrote in misc.phone.mobile.iphone:

You have to ask Apple that question because nobody has seen an iOS 15 fix. >> So far the patches are only for the latest iOS 16 and macOS 13 releases.

If your telephone can't run ios 16, it's time to buy a new one.

You are correct that only iOS 16 is supported by Apple for all known fixes. https://hothardware.com/news/apple-admits-only-fully-patches-security-flaws-in-latest-os-releases

Apple does not support older telephones.

Apple may fix the absolute worst iOS 15 bugs but Apple says if you can't
move to iOS 16 you will not get all known bugfixes that Apple has written. https://arstechnica.com/gadgets/2022/10/apple-clarifies-security-update-policy-only-the-latest-oses-are-fully-patched/

Not fully fixing iOS 15 is Apple's way of making you buy a newer iPhone. https://support.apple.com/guide/depoyment/about-software-updates-depc4c80847a/web

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

In article <[email protected]>, Rod Speed
<[email protected]> wrote:

If your telephone can't run ios 16, it's time to buy a new one.

Apple does not support older telephones.

Wrong, as always. There have been lots of updates for iOS 15 recently.

ios 12 too.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, 16 Feb 2023 11:10:39 +1100, Hank Rogers <[email protected]d>
wrote:

NewsKrawler wrote:

On 2023-02-15, Incubus <[email protected]> wrote:

CVE-2023-23529

What about iOS 15 patches?

You have to ask Apple that question because nobody has seen an iOS 15
fix.
So far the patches are only for the latest iOS 16 and macOS 13 releases.

If your telephone can't run ios 16, it's time to buy a new one.

Apple does not support older telephones.

Wrong, as always. There have been lots of updates for iOS 15 recently.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 15 Feb 2023, nospam <[email protected]d> wrote in misc.phone.mobile.iphone:

If your telephone can't run ios 16, it's time to buy a new one.

Apple does not support older telephones.

Wrong, as always. There have been lots of updates for iOS 15 recently.

ios 12 too.

He's right. You're wrong. In fact, you're always wrong.
You don't understand a word of what you say (or you're lying).

Either way, you can't learn but anyone who can learn should read this.

https://screenrant.com/apple-product-security-update-lifespan/
The support document notes that only the latest releases provide full protection from security vulnerabilities.

"Because of dependency on architecture and system changes to any current version of macOS (for example, macOS 13), not all known security issues are addressed in previous versions (for example, macOS 12)," the Apple document says.

Essentially, this means that the security updates Apple issues to older operating system versions are not fully protected.

Using that logic, the iOS 15.7.1 update may leave security vulnerabilities unaddressed that have been patched in the iOS 16.1 updates.

This means that although Apple issues security updates to older operating systems, users should only expect their devices to be secure during the
typical five to six-year software upgrade support window.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)