Make Sure to Update: iOS 17.4 and iPadOS 17.4 Fix Two Major Security Vulnerabilities

[MacRumors]

iPhone and iPad owners may want to update to iOS 17.4 and iPadOS 17.4 in the near future, as the updates address two security vulnerabilities that may have been exploited to gain access to user devices.

In the security support document for the updates, Apple says that it "is aware of a report" that RTKit and kernel vulnerabilities may have been exploited by bad actors.

Impact: An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

Apple fixed the memory corruption issue with improved validation to patch the security hole.

iOS 17.4 and iPadOS 17.4 also address an Accessibility vulnerability and an issue with Safari Private Browsing that could allow locked tabs to be briefly visible while switching tab groups.

The software updates were released this morning and are available on eligible iPhones and iPads by going to Settings > General > Software Update.

Article Link: Make Sure to Update: iOS 17.4 and iPadOS 17.4 Fix Two Major Security Vulnerabilities

 

[jz0309]

If it weren’t for security fixes I wouldn’t update, there are no (new) features of interest for me. YMMV

 

[midkay]

Got to say, just updated my iPhone 15 Pro Max and web pages seem to be loading faster & scrolling is insanely smooth with zero stutters even while loading the page. My device hasn’t felt this smooth in a while, I’m very pleased so far.

 

[ThomasJL]

Do those two security vulnerabilities exist in iOS 16.7.5, which was released 40 days ago?

 

[zorinlynx]

Got to say, just updated my iPhone 15 Pro Max and web pages seem to be loading faster & scrolling is insanely smooth with zero stutters even while loading the page. My device hasn’t felt this smooth in a while, I’m very pleased so far.

You don't have to be so verbose, "Safari is snappier!" is sufficient, as per tradition.

 

[antiprotest]

Got to say, just updated my iPhone 15 Pro Max and web pages seem to be loading faster & scrolling is insanely smooth with zero stutters even while loading the page. My device hasn’t felt this smooth in a while, I’m very pleased so far.

It's just because the update made you restart the phone.

 

[antiprotest]

I like this graphic. Cute.

 

[LoveToMacRumors]

no thanks, staying on ios15

 

[LightProtector]

If it weren’t for security fixes I wouldn’t update, there are no (new) features of interest for me. YMMV

I'm mainly in for the refinements, fixed notification bug, and much improved battery life.

 

[LightProtector]

no thanks, staying on ios15

What would convince you to update?

 

[backstreetboy]

Lol need a whole system update to fix a Safari bug? For everything holy Apple please learn from Android and move Safari to the App Store.

 

[c84216]

I'm all about Apple disclosing these things as an incentive to upgrade, except, in theory wouldn't these also impact visionOS and the Safari problems macOS which weren't patched today?

 

[jz0309]

I'm mainly in for the refinements, fixed notification bug, and much improved battery life.

I dunno, my 13PM is serving me quite well, with my usage, on average I'm somewhere in the 50% range at end of day, have not really noticed any "much improved battery life", but then again, I don't really pay that much attention and of course YMMV

 

[Lounge vibes 05]

Do those two security vulnerabilities exist in iOS 16.7.5, which was released 40 days ago?

Probably, which is more than likely why both 16.7.6 and 15.8.2 RC’s we’re just released the other day.

 

[coffeemilktea]

I was updating purely for new emojis, but the increased security is a nice touch too.

 

[ThomasJL]

Probably, which is more than likely why both 16.7.6 and 15.8.2 RC’s we’re just released the other day.

Thank you for the information.

Will iOS 16.7.6 be available for iPhones that can support iOS 17 but are currently on a previous version of iOS 16?

 

[0134168]

No way. Staying in 17.3.1. I don´t want to update my Apple Watch to watchOS 10.

 

[JosephAW]

What would convince you to update?

An iPhone 16 Pro Max

 

[Lounge vibes 05]

Thank you for the information.

Will iOS 16.7.6 be available for iPhones that can support iOS 17 but are currently on a previous version of iOS 16?

Nope.

iOS 15.8.2: iPhone 6S, 6S+, 7, 7+, iPad Air2 and Mini 4, iPod Touch 7

iOS 16.7.6: iPhone 8, 8+ and X, iPad 5, iPad Pro 12.9 (2015) and 9.7 (2016)

Kind of crazy to think the iPad Air 2from 2014 is still receiving security updates in 2024…

 

[MVMNT]

Have fun side-loading those, EU.

 

[klasma]

Do those two security vulnerabilities exist in iOS 16.7.5, which was released 40 days ago?

Yeah, it’s really annoying that Apple doesn’t say which older OS versions are affected. I guess I’ll stay insecure and let MacRumors hack me.

 

[klasma]

I like this graphic. Cute.

Right, what harm could that little thing possibly do?

(Apart from the isometrics triggering my OCD.)

 

[klasma]

What would convince you to update?

Sideloading ability.

 

[klasma]

I'm all about Apple disclosing these things as an incentive to upgrade, except, in theory wouldn't these also impact visionOS and the Safari problems macOS which weren't patched today?

The bug is in RTKit, which is a real-time OS running separate from the main iOS. This is probably sufficiently different on the AVP.

 

[klasma]

Thank you for the information.

Will iOS 16.7.6 be available for iPhones that can support iOS 17 but are currently on a previous version of iOS 16?

No. Apple never allows that.