Skip to content
November 4, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • Apple released iOS and macOS system updates to fix Specter vulnerabilities
  • Technology

Apple released iOS and macOS system updates to fix Specter vulnerabilities

Do Son January 9, 2018 2 minutes read

Earlier this morning, Apple released the iOS 11.2.2 system update to solve specter vulnerabilities in Safari.

Applies to:  iPhone 5s and later iPhone, iPad Air and later iPad, 6th generation iPod touch.

Description: iOS 11.2.2 includes security improvements for Safari and WebKit to mitigate the impact of Spectre security vulnerabilities (CVE-2017-5753 and CVE-2017-5715).

Following iOS, Apple released the macOS High Sierra 10.13.2 update earlier this morning, though not in a security note, probably to honor its previous commitment to fix Specter vulnerabilities in Safari.

Apple released macOS High Sierra 10.13.2 in December last year but admitted last week that Safari browser needs further updates to mitigate the impact of the security breach.

“All Macs and iOS devices have an impact, but no known users are exploited.” To exploit these vulnerabilities requires loading a malicious application on your Mac and iOS, we recommend that users only source from trusted sources Download software and applications such as the App Store

Apple has helped prevent Meltdown vulnerabilities with iOS 11.2, macOS 10.13.2, and tvOS 11.2 Apple Watch is not affected by Meltdown We plan to release updates for the Safari browser in the coming days Mitigating Specter vulnerabilities Impact.”

Apple recommends that all Mac users upgrade to the latest macOS High Sierra 10.13.2 update, which users can find on the “Update” page of the Mac App Store.

Reference: apple.com

Add Daily CyberSecurity as a preferred source on Google

Related coverage

  • Qualcomm Launches Dragonwing IQ-X: Oryon CPU Brings 45 TOPS Edge AI to Factory PCs
  • GitHub Security Alerts has detected over 4 million vulnerabilities
  • Microsoft Pulls the Plug on Movies & TV Store: End of an Entertainment Era
  • The Em Dash is Gone: Sam Altman Confirms ChatGPT Finally Dumps Its Most Annoying Habit
  • Ripple become the second largest cryptocurrency
  • The iPhone Fold is Coming: Apple’s 2026 Strategy Revealed
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: macOS system updates

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 8.7
    WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through...
    Watchtower Verified📅 Updated: Nov 4, 2026
  • CVE-2023-54413CVSS 5.1
    WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers...
    Watchtower Verified📅 Updated: Nov 4, 2026
  • CVE-2026-81648CVSS 10.0
    The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of...
    Admin intel📅 Updated: Nov 3, 2026
  • CVE-2026-119977CVSS 8.1
    WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable,...
    CISA KEV📅 Added to KEV: Nov 3, 2026
  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-121606CVSS 10.0
    A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9....
    📅 Updated: Nov 4, 2026
  • CVE-2026-121600CVSS 9.4
    A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of...
    📅 Updated: Nov 4, 2026
  • CVE-2026-121599CVSS 9.4
    A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of...
    📅 Updated: Nov 4, 2026
  • CVE-2026-92189CVSS 9.8
    Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote...
    📅 Updated: Nov 4, 2026
  • CVE-2026-92188CVSS 9.8
    Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...
    📅 Updated: Nov 4, 2026
  • CVE-2026-92190CVSS 9.8
    Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
    📅 Updated: Nov 4, 2026
  • CVE-2024-50330CVSS 9.8
    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a...
    📅 Updated: Nov 4, 2026
  • CVE-2026-101967CVSS 9.3
    An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows...
    📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.