Apple has released security updates for iPhones, iPads and Macs to fix the two code execution vulnerabilities that could allow attackers to covertly take control of devices.

The vulnerability CVE-2022-32893 may lead to arbitrary code execution by processing maliciously crafted web content. This vulnerability could be exploited by an attacker to gain access to a susceptible system by tricking a potential victim into visiting a specially designed malicious website.

The CVE-2022-32894 vulnerability could provide an application permission to run arbitrary code with kernel privileges.

The Apple products affected by these vulnerabilities are iPhone 6s and subsequent models, all iPad Pro models (including iPad Air 2 and later), iPad 5th generation and later models, iPad Mini 4 and later versions, and iPod touch models from the 7th generation. They also affect macOS Monterey, Apple's desktop operating system for Macs.

There is high possibility of exploitation of these vulnerabilities.

 Table 1: Vulnerability details 

                                                                                       Table 2: Vulnerable versions