This week, Apple released updates for its operating systems. These included iOS and iPadOS 16.3 as well as macOS Ventura 13.2, introducing new features as well as bug and security fixes.
In this article, we’ll take a look at some highlights of the new features, bug fixes, and security patches included in each updates.
We’ll also take a look at Apple’s discrepancy between a highly unexpected patch for ten-year-old iPhones and iPads, while continuing to neglect to patch a still-sold Apple Watch model.
In this article:
Available for:
All supported Macs currently running macOS Ventura
New features:
How to protect your Apple ID account with Security Keys on iPhone, iPad, or Mac
Enterprise:
Improvements and bug fixes:
profiles renew command can now succeed for an enrollment profile when CheckInURL is changed.Security-related fixes and updates:
At least 26 vulnerabilities were addressed in this update. Here are a few of the more notable ones:
AppleMobileFileIntegrity
Impact: An app may be able to access user-sensitive data
Description: This issue was addressed by enabling hardened runtime.
DiskArbitration
Impact: An encrypted volume may be unmounted and remounted by a different user without prompting for the password
Description: A logic issue was addressed with improved state management.
Mail Drafts
Impact: The quoted original message may be selected from the wrong email when forwarding an email from an Exchange account
Description: A logic issue was addressed with improved state management.
Screen Time
Impact: An app may be able to access information about a user’s contacts
Description: A privacy issue was addressed with improved private data redaction for log entries.
Wi-Fi
Impact: An app may be able to disclose kernel memory
Description: The issue was addressed with improved memory handling.
For the full list of security patches included in Ventura 13.2, have a look here.
You can get this update by going to System Preferences > Software Update, where compatible Macs running macOS Mojave or newer will see the Monterey update appear. If your Mac is running macOS High Sierra or older, look for macOS Ventura in the App Store and download it from there.
Available for:
All supported Macs currently running macOS Monterey
Enterprise, improvements and bug fixes:
softwareupdate command line tool no longer lists macOS 13 Ventura as an available update when it is deferred by MDM.Security-related fixes and updates:
At least 18 vulnerabilities were addressed. All of them the same as those addressed in the macOS Ventura update.
For the full list of security patches included in Monterey 12.6.3, have a look here.
You can get this update by going to System Preferences > Software Update.
Available for:
All supported Macs currently running macOS Monterey
Security-related fixes and updates:
At least 8 vulnerabilities were addressed in this update, all of them the same as those addressed in the macOS Monterey and Ventura updates.
For the full list of security patches included in Big Sur 11.7.3, have a look here.
You can get this update by going to System Preferences > Software Update.
Available for:
macOS Big Sur and macOS Monterey.
This update addresses 3 WebKit issues, the same as those addressed in the macOS updates.
The short list of fixes can be seen here, and the update is available in System Preferences > Software Update on your Mac. It will pop up as an available update once macOS 12.6.3 or 11.7.3 has been installed.
Available for:
iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later
New features & functionality:
Enterprise:
Improvements and bug fixes:
Security-related fixes and updates:
At least 13 vulnerabilities were addressed in this update, all of them the same as those addressed in the macOS updates.
The full list of security issues that were addressed can be found here. To get your hands on this latest update, connect your device to your Mac and follow the update prompts. You can also download these updates over the air by going to Settings > General > Software Update on your device.
Available for:
iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation)
Security-related fixes and updates:
Just 5 vulnerabilities were addressed in this update, all of them the same as those covered in the previously mentioned OS updates.
The full list of security issues that were addressed can be found here. To get this latest update, connect your device to your Mac and follow the update prompts. You can also download these updates over the air by going to Settings > General > Software Update on your device.
Available for:
iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation)
Security-related fixes and updates:
Surprisingly, Apple actually released another iOS 12 security update. Prior to this week, the last iOS 12 update was released in August, before iOS 16 came out. Most people who track Apple security updates had assumed, due to the lack of intervening updates, that Apple was no longer supporting iOS 12 in any way.
And yet, here we are again. iOS 12.5.7 received a single security fix, specifically to address the actively exploited vulnerability that was fixed in iOS 16.2 back in mid-December.
WebKit
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1.
Description: A type confusion issue was addressed with improved state handling.
While it might seem nice that Apple is still releasing the rare, extremely late security updates for iOS 12 to address actively exploited vulnerabilities, it’s deeply concerning from another perspective. Apple is giving users of devices running iOS 12 a false sense of security by seeming to still provide security updates, while leaving nearly all vulnerabilities unpatched—including very serious ones that aren’t known to have been actively exploited. The average user has no concept that only solo, token security updates are being provided while leaving their device at great risk, for example by leaving them exposed to numerous WebKit vulnerabilities while browsing the Web. Third-party browser on iOS 12 aren’t a solution, because Apple forced all browsers to use its WebKit page rendering engine.
The page mentioning the security fix can be found here. To get this latest update, connect your device to your Mac and follow the update prompts. You can also download these updates over the air by going to Settings > General > Software Update on your device.
Available for:
Apple Watch Series 4 and later
New features:
Security-related fixes and updates:
At least 12 vulnerabilities were addressed in this update, all of them the same as those covered in the previously mentioned OS updates. The full list can be found here.
To install this update, make sure your iPhone is up to date first, both your phone and watch are connected to the same Wi-Fi network, and the watch has at least a 50% charge. Then open the Watch app on your phone and tap General > Software Update.
Meanwhile, there’s still no word on when (or if) Apple Watch Series 3—which Apple still sells refurbished—will get watchOS 8 security updates. Apple has, for unknown reasons, chosen not to release watchOS 9 for this model, putting the device in an awkward state of limbo.
The most recent security update for watchOS 8 was in mid-August, about a month before watchOS 9 came out. That means it has been more than five months since the Apple Watch Series 3 has gotten any security updates.
As we’ve mentioned previously, simultaneous updates for watchOS versions would not be unprecedented. As recently as late 2020, Apple released simultaneous updates for two or three watchOS versions at a time, mainly to support older Apple Watch models.
It’s hard to understand how Apple can justify such seemingly negligent behavior regarding any product that it’s still selling.
Intego has asked Apple multiple times since October for an update regarding watchOS 8 security for the Apple Watch Series 3, but Apple has neglected to respond to our inquiries.
Available for:
Apple TV 4K (all generations), and Apple TV HD (aka 4th generation)
For some reason, Apple delayed releasing a tvOS update until a day after all the others were released.
Security-related fixes and updates:
At least 11 vulnerabilities were addressed in this update, each of which was included in the previously mentioned OS updates. You can find the full list here.
The tvOS update can be downloaded directly from the Apple TV by going to Settings > System > Update Software.
If you get nothing else out of this article, here are some key points:
It is advisable to update to the latest operating systems as soon as you reasonably can. Even if you aren’t interested in new features, it’s always important to get the benefits of new security fixes as quickly as possible to help you stay protected.
If you have a Mac running Monterey or Big Sur that’s compatible with Ventura, you may wish to update to the new Monterey or Big Sur version, and then as soon as practical, upgrade to macOS Ventura. Here’s why. Generally speaking, it is best to update to the latest Apple OS versions quickly for security reasons. For maximum security, one cannot rely on any minimal security patches Apple may release for previous OS versions.
Apple’s Poor Patching Policies Potentially Make Users’ Security and Privacy Precarious
Whenever you’re preparing to update iOS, iPadOS, or macOS, always back up your data before installing any updates. This gives you a restore point if something does not go as planned.
See also our related article on checking your macOS backups:
You can also subscribe to our e-mail newsletter and keep an eye here on The Mac Security Blog for the latest Apple security and privacy news. And don’t forget to follow Intego on your favorite social media channels: 
