Apple Triangulation Font Bug and Kernel PAC Bypass in KEV
Both bugs were fixed in late 2022 and early 2023 and only matter for Apple devices that never updated past those builds, but they were real spyware tools, so find any device still that old.
Must act: Owners of iPhones or iPads below iOS 16.3 (on 16) or 15.7.8 (on 15), Macs below Ventura 13.2, Monterey 12.6.8 or Big Sur 11.7.9, and Apple Watches or TVs below watchOS 9.3 or tvOS 16.3.
Can relax: Anyone whose devices have taken an update since mid-2023; current builds such as iOS 26.7.1, 18.7.10 and 16.7.16 include both fixes, and iOS 15.8.8 includes the font fix.
- Pull an OS version report from MDM and flag iPhones and iPads below iOS 16.6 (on 16) or 15.7.8 (on 15), the floors that close the whole Triangulation chain.
- Check Macs with sw_vers -productVersion and flag Ventura below 13.2, Monterey below 12.6.8 and Big Sur below 11.7.9.
- Update flagged devices to the newest build they support, such as iOS 16.7.16 for the iPhone 8 and X or iOS 15.8.8 for the iPhone 6s and 7.