• Master Patch List of May 16, 2022 – Apple zero days fixed

    I’m releasing an update to the Master Patch list – not to give the go ahead for any Windows patches, rather to announce that Apple has released several updates that include fixes for zero days.

    While it includes new features for Apple Cash, the Podcast app amongst others, it includes 30 security fixes for iOS 15.5 and macOS 12.4 includes 50 fixes.

    Overall tally:

    macOS Monterey 12.4 – 73 bugs fixed
    macOS Big Sur 11.6.6 – 52 bugs fixed
    Security Update 2022-004 Catalina – 37 bugs fixed
    iOS and iPadOS 15.5 – 34 bugs fixed
    watchOS 8.6 – 21 bugs fixed

    1 zero-day in macOS Big Sur 11.6.6
    1 zero-day in watchOS 8.6

    One zero day involves “A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

    I’ll dig around to see if I can find information on HOW the attacks occur as not all risks are created the same.  Note I recommend that you wait for Apple’s ‘dribble’ patching while they get their telemetry from early updaters.