Skip to main content
← Early warnings

Apple patches iMessage flaws that expose group chat messages

Apple said it released updates to fix an iMessage flaw that could let a remote attacker join a group chat and receive its messages. The same updates also fix a separate iMessage flaw that could let a person added to a group read messages sent before they joined.

Written by a model from the sources below. Verify against them.

Sources1Reported, not confirmed
Kind
Vulnerability
Vendor
Apple
Product
iMessage
Status
Reported, not confirmed
First seen

What to do

  • Update iPhone, iPad, and Mac to the latest Apple software release

  • Go to Settings > General > Software Update to confirm the update installed

  • Review group chat membership for unfamiliar participants

Timeline

  1. Made public by The Hacker News
  2. First seen by cve.now

Evidence 1

  1. Press
    The Hacker News
    “An iMessage flaw could let a remote attacker join a group chat and receive its messages, Apple said yesterday, and it released updates to fix it.”

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.

Questions about SZB-fdab5e09d5

Has Apple confirmed it?

The Hacker News reports it. No statement from Apple has reached cve.now yet.Source: The Hacker News

What should Apple users do?

Update iPhone, iPad, and Mac to the latest Apple software release. Go to Settings > General > Software Update to confirm the update installed. Review group chat membership for unfamiliar participants.