You need to update Google Android, Chrome, Windows, iOS and Zoom

May is already It’s been another busy month of security updates, with Google’s Chrome browser and Android operating system, Zoom and Apple’s iOS releasing patches to fix critical vulnerabilities.

Meanwhile, things haven’t gone well for Microsoft, which was forced to release out-of-band updates after this month’s disastrous Patch Tuesday. Cisco, Nvidia, Zoom, and VMWare have all released patches for pressing flaws.

Here’s what you need to know.

Apple iOS and iPadOS 15.5, macOS Big Sur 11.6.6, tvOS 15.5, watchOS 8.6

Apple will announce iOS 16 at its conference Worldwide Developers Conference In June, the iPhone maker may have released its last major iOS 15 point update in May. It comes with new features, but iOS and iPadOS 15.5 also fixes 34 security holes, some of them serious.

Security issues fixed in iOS 15.5 include flaws in the kernel and WebKit browser engine, according to Apple support pageThankfully, neither the patches released in iOS nor iPad 15.5 were used in the attack, but that doesn’t mean they won’t be used if you don’t update now, according to the company.

At the same time, users Mac OS, TV operating systemand Apple Watch Their devices should be updated soon, as Apple has also released an emergency update to patch what it believes has been used in the attack.defects in Apple AVD, marked as CVE-2022-22675, may allow applications to execute code with kernel privileges. The problem in the kernel is serious, so it’s worth checking and updating your device right now.

Microsoft’s Flubbed May Patch Tuesday

Microsoft’s May Patch Tuesday was a disaster for hardworking businesses that installed it right away.

On May 10, the company released security update repair 75 vulnerabilities, eight were marked as critical and three were exploited by attackers. The issues fixed by May Patch Tuesday are important, but soon some Microsoft users were experiencing issues, and they report Authentication failed after installing latest update. It affects people using client and server Windows platforms and systems running all versions of Windows, including Windows 11 and Windows Server 2022.

To address this, the company was forced to release out-of-band updates for Windows 10, Windows 11, and Windows Server 2008, 2012, 2016, 2019, and 2022 on May 20.Updates won’t install automatically – you’ll need to download from Microsoft update catalog.

Firefox 100.0.2

In early May, Mozilla released Firefox 100, including 9 security fixes for its Firefox browser, 7 of which are rated high severity.But in late May, ethical hacking was Pwn20wn The Vancouver competition showed how attackers could execute JavaScript code on devices running the latest Mozilla software. Mozilla stable Another issue in updating Firefox 100.0.2, Firefox ESR 91.9.1, Firefox for Android 100.3 and Thunderbird 91.9.1. Click those update buttons.

android

May’s Android security update is a major update, patching 36 vulnerabilities, including one that has already been exploited by attackers.This has been used The flaw is an elevation of privilege vulnerability in the Linux kernel, known as the “dirty pipes. “

The vulnerability, which affects newer Android devices running Android 12 and later, was disclosed by Google in February, but it took a while to reach devices.

Source link