Apple’s i-Patches Fix Critical iOS Flaws
Summary: Apple released an iOS update fixing at least three serious security holes in how iPhone, iPad, and iPod Touch devices render PDF files, flaws that could let attackers install software without warning or permission if a user merely browsed to a malicious site. The update, iOS 4.2.9 or iOS 4.3.4 depending on the device and downloadable only through iTunes, patches the same vulnerabilities that jailbreakme.com had been using to jailbreak Apple devices.
What you should know: The flaws required no download or permission prompt - only a visit to a malicious site - and the same holes were already public enough to power a jailbreak tool, meaning attackers had a working map to the vulnerability before users patched.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026