Apple has rolled out an emergency update, macOS Sequoia 15.1.1, and you should install it immediately if you’re running this version of macOS. Why the urgency? This patch addresses two zero-day vulnerabilities actively exploited in the wild, targeting Intel-based Macs.

The vulnerabilities involve JavaScriptCore and WebKit, two critical components of macOS that handle web content. Here’s the breakdown:

JavaScriptCore vulnerability

• Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
• Description: The issue was addressed with improved checks.
• WebKit Bugzilla: 283063
• CVE-2024-44308: Clément Lecigne and Benoît Sevens of Google’s Threat Analysis Group

WebKit vulnerability

• Impact: Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
• Description: A cookie management issue was addressed with improved state management.
• WebKit Bugzilla: 283095
• CVE-2024-44309: Clément Lecigne and Benoît Sevens of Google’s Threat Analysis Group

Both issues were identified by Google’s Threat Analysis Group, emphasizing the need for swift action. While the vulnerabilities primarily affect Intel-based Macs, Apple silicon devices may also be at risk as iOS updates addressing similar flaws have already been deployed.

Zero-day exploits are dangerous because they’re exploited before developers are aware of the flaws. These vulnerabilities, if left unpatched, can allow attackers to bypass your Mac’s defenses and take control, potentially stealing sensitive data or causing other havoc.

Who’s affected?

This update is critical for users on macOS 15.1. Unfortunately, Apple hasn’t yet issued equivalent fixes for macOS 14 (Sonoma) or 13 (Ventura), but these are likely coming soon. If you’re on an older version, keep an eye out for updates in the coming weeks.

How to update your Mac

1. Go to System Settings.
2. Navigate to General > Software Update.
3. Click Update Now and follow the prompts.

After the update, restart your Mac to ensure the patches are applied.

The constant evolution of cybersecurity threats makes staying updated more critical than ever. This is just one of the many vulnerabilities Apple and other tech giants battle every day to keep your data secure. For now, take a few minutes to update your Mac and avoid becoming a statistic.