With two security patches, Apple has released macOS Sonoma 14.4.1 and iOS 17.4.1. The business has now provided a standalone upgrade for its web browser, Safari, for customers using older macOS versions. This update includes the same updates as macOS 14.4.1.
As Apple’s website explains, Safari 17.4.1 resolves a WebRTC vulnerability that lets arbitrary code run when processing photos. According to Apple, an “out-of-bounds write issue was fixed with increased input validation,” they give Google Project Zero’s Nick Galloway credit for identifying and disclosing the exploit.
Versions 12 and 13 of macOS Monterey and Ventura are the only Mac operating systems that can receive the standalone Safari update. Macs running MacOS Sonoma, the most recent version of macOS, are not compatible with some Macs.
Also, to address the WebRTC attack on some iPad and iPhone devices that iOS 17 does not support—such as the iPhone 8 and iPhone X—Apple has issued iOS 16.7.7. Keeping your devices updated is essential to protect them from vulnerabilities like this.
Open the System Settings app, select the General option, and then select Software Upgrade to upgrade Safari on your Mac. Click Update Now after your Mac has found the available update. To update, navigate to Settings > General > Software Update on an iOS device. Note that not all outdated hardware receives security updates.