PSA: iOS 17.7.2 brings security fixes to older iPhones and iPads

1 week ago 7

If your iPhone or iPad is too old to run iOS 18, or if you’ve simply held off updating by choice, Apple is still providing key security fixes for you. The latest arrive in today’s iOS 17.7.2 and iPadOS 17.7.2, which are available now.

Security updates recommended for all users

Apple released iOS and iPadOS 17.7.2 today alongside similar security updates in iOS 18.1.1.

The updates are available now and recommended for all users.

Here are the specific fixes they introduce, from Apple’s support doc:

JavaScriptCore

Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
Description: The issue was addressed with improved checks.

WebKit

Impact: Processing maliciously crafted web content may lead to a cross site scripting attack.

Description: A cookie management issue was addressed with improved state management.

Actively exploited issues?

Apple notes that with both security issues, it is aware of ‘a report that this issue may have been actively exploited on Intel-based Mac systems.’

That’s because the same issue impacts macOS as well. iPhone and iPad users should still update to the latest software regardless, but just know that the only known active exploit happened on an Intel Mac.

Are you still running iOS 17.7? Is that by choice, or because your device can’t run iOS 18? Let us know in the comments.