{"id":846730,"date":"2023-07-25T08:57:43","date_gmt":"2023-07-25T10:57:43","guid":{"rendered":"https:\/\/teknomers.com\/fr\/apple-deploie-des-correctifs-urgents-pour-les-failles-zero-day-affectant-les-iphones-ipads-et-mac\/"},"modified":"2023-07-25T08:57:47","modified_gmt":"2023-07-25T10:57:47","slug":"apple-deploie-des-correctifs-urgents-pour-les-failles-zero-day-affectant-les-iphones-ipads-et-mac","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/apple-deploie-des-correctifs-urgents-pour-les-failles-zero-day-affectant-les-iphones-ipads-et-mac\/","title":{"rendered":"Apple d\u00e9ploie des correctifs urgents pour les failles Zero-Day affectant les iPhones, iPads et Mac"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">25 juil. 2023<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">THN<\/span><\/span><span class=\"p-tags\">S\u00e9curit\u00e9 des terminaux \/ Zero Day<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><\/div>\n<p>Apple a <a rel=\"nofollow noopener\" href=\"https:\/\/support.apple.com\/en-us\/HT201222\" target=\"_blank\">d\u00e9ploy\u00e9 des mises \u00e0 jour de s\u00e9curit\u00e9<\/a> \u00e0 iOS, iPadOS, macOS, tvOS, watchOS et Safari pour r\u00e9soudre plusieurs vuln\u00e9rabilit\u00e9s de s\u00e9curit\u00e9, dont un bogue zero-day activement exploit\u00e9 dans la nature.<\/p>\n<p>Suivi comme <strong>CVE-2023-38606<\/strong>, la lacune r\u00e9side dans le noyau et permet \u00e0 une application malveillante de modifier potentiellement l&#8217;\u00e9tat sensible du noyau.  La soci\u00e9t\u00e9 a d\u00e9clar\u00e9 que le probl\u00e8me avait \u00e9t\u00e9 r\u00e9solu par une meilleure gestion de l&#8217;\u00c9tat.<\/p>\n<p>&#8220;Apple est au courant d&#8217;un rapport selon lequel ce probl\u00e8me pourrait avoir \u00e9t\u00e9 activement exploit\u00e9 contre des versions d&#8217;iOS publi\u00e9es avant iOS 15.7.1&#8221;, a not\u00e9 le g\u00e9ant de la technologie dans son avis.<\/p>\n<p>Il convient de noter que CVE-2023-38606 est la troisi\u00e8me vuln\u00e9rabilit\u00e9 de s\u00e9curit\u00e9 d\u00e9couverte dans le cadre de l&#8217;op\u00e9ration Triangulation, une campagne sophistiqu\u00e9e de cyberespionnage mobile ciblant les appareils iOS depuis 2019 \u00e0 l&#8217;aide d&#8217;une cha\u00eene d&#8217;exploitation sans clic.  Les deux autres zero-days, CVE-2023-32434 et CVE-2023-32435, ont \u00e9t\u00e9 corrig\u00e9s par Apple le mois dernier.<\/p>\n<section class=\"check_two clear badbox\"><center class=\"cf\"> <\/center><\/section>\n<p>Les chercheurs de Kaspersky Valentin Pashkov, Mikhail Vinogradov, Georgy Kucherin, Leonid Bezvershenko et Boris Larin ont \u00e9t\u00e9 cr\u00e9dit\u00e9s d&#8217;avoir d\u00e9couvert et signal\u00e9 la faille.<\/p>\n<p>Les mises \u00e0 jour sont disponibles pour les appareils et syst\u00e8mes d&#8217;exploitation suivants &#8211;<\/p>\n<ul>\n<li><a rel=\"nofollow noopener\" href=\"https:\/\/support.apple.com\/en-us\/HT213841\" target=\"_blank\">iOS 16.6 et iPadOS 16.6<\/a> &#8211; iPhone 8 et versions ult\u00e9rieures, iPad Pro (tous les mod\u00e8les), iPad Air 3e g\u00e9n\u00e9ration et versions ult\u00e9rieures, iPad 5e g\u00e9n\u00e9ration et versions ult\u00e9rieures et iPad mini 5e g\u00e9n\u00e9ration et versions ult\u00e9rieures<\/li>\n<li><a rel=\"nofollow noopener\" href=\"https:\/\/support.apple.com\/en-us\/HT213842\" target=\"_blank\">iOS 15.7.8 et iPadOS 15.7.8<\/a> &#8211; iPhone 6s (tous les mod\u00e8les), iPhone 7 (tous les mod\u00e8les), iPhone SE (1re g\u00e9n\u00e9ration), iPad Air 2, iPad mini (4e g\u00e9n\u00e9ration) et iPod touch (7e g\u00e9n\u00e9ration)<\/li>\n<li><a rel=\"nofollow noopener\" href=\"https:\/\/support.apple.com\/en-us\/HT213843\" target=\"_blank\">macOS Ventura 13.5<\/a>, <a rel=\"nofollow noopener\" href=\"https:\/\/support.apple.com\/en-us\/HT213844\" target=\"_blank\">macOS Monterey 12.6.8<\/a>et <a rel=\"nofollow noopener\" href=\"https:\/\/support.apple.com\/en-us\/HT213845\" target=\"_blank\">macOS Big Sur 11.7.9<\/a><\/li>\n<li><a rel=\"nofollow noopener\" href=\"https:\/\/support.apple.com\/en-us\/HT213846\" target=\"_blank\">tvOS 16.6<\/a> &#8211; Apple TV 4K (tous les mod\u00e8les) et Apple TV HD, et<\/li>\n<li><a rel=\"nofollow noopener\" href=\"https:\/\/support.apple.com\/en-us\/HT213848\" target=\"_blank\">watchOS 9.6 <\/a>&#8211; Apple Watch s\u00e9rie 4 et versions ult\u00e9rieures<\/li>\n<\/ul>\n<p>Avec la derni\u00e8re s\u00e9rie de correctifs, Apple a r\u00e9solu un total de 11 jours z\u00e9ro impactant son logiciel depuis le d\u00e9but de 2023. Cela survient \u00e9galement deux semaines apr\u00e8s que la soci\u00e9t\u00e9 a publi\u00e9 des correctifs d&#8217;urgence pour un bogue d&#8217;ex\u00e9cution de code \u00e0 distance dans WebKit qui pourrait conduire \u00e0 l&#8217;ex\u00e9cution de code arbitraire (CVE-2023-37450).<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant ?  Suivez-nous sur <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"nofollow noopener\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">LinkedIn<\/a> pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2023\/07\/apple-rolls-out-urgent-patches-for-zero.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80225 juil. 2023\ue804THNS\u00e9curit\u00e9 des terminaux \/ Zero Day Apple a d\u00e9ploy\u00e9 des mises \u00e0 jour de s\u00e9curit\u00e9 \u00e0 iOS, iPadOS, macOS, tvOS, watchOS et Safari pour r\u00e9soudre plusieurs vuln\u00e9rabilit\u00e9s de s\u00e9curit\u00e9, dont un bogue zero-day activement exploit\u00e9 dans la nature. Suivi comme CVE-2023-38606, la lacune r\u00e9side dans le noyau et permet \u00e0 une application malveillante [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":846731,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[34911,2479,4168,15954,4158,4165,4161,7050,133,4806,101405,68855,4157,4159,4171,4170,65,4167,16435,4160,4163,4162,185,4172,4169,30151,4166,4164,35759],"class_list":["post-846730","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-affectant","tag-apple","tag-comment-pirater","tag-correctifs","tag-cyber-actualites","tag-cyber-attaques","tag-cyber-mises-a-jour","tag-deploie","tag-des","tag-failles","tag-ipads","tag-iphones","tag-lactualite-de-la-cybersecurite","tag-lactualite-de-la-cybersecurite-aujourdhui","tag-lactualite-des-hackers","tag-la-securite-des-informations","tag-les","tag-logiciel-malveillant-de-ransomware","tag-mac","tag-mises-a-jour-de-la-cybersecurite","tag-nouvelles-de-piratage","tag-nouvelles-de-pirates","tag-pour","tag-securite-informatique","tag-securite-internet","tag-urgents","tag-violation-de-donnees","tag-vulnerabilite-logicielle","tag-zeroday"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/846730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=846730"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/846730\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/846731"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=846730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=846730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=846730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}