Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


     Security Updates for macOS 15.3.1, watchOS 11.3.1, and visionOS 2.3.1

   Adam Engst

   Alongside the releases of iOS and iPadOS to address a USB Restricted
   Mode vulnerability (see ' [1]iOS 18.3.1, iPadOS 18.3.1, and iPadOS
   17.7.5 Block USB Restricted Mode Attack,' 10 February 2025), Apple also
   pushed out [2]macOS 15.3.1 Sequoia, [3]macOS 14.7.4 Sonoma, [4]macOS
   13.7.4 Ventura, [5]watchOS 11.3.1, and [6]visionOS 2.3.1. None of these
   releases have [7]security notes listing CVE entries, suggesting they
   address a serious vulnerability Apple discovered internally. Release
   notes are currently available only for the three macOS updates, and
   they say only, 'This update provides important security fixes and is
   recommended for all users.'

   All I can imagine is that working on the USB Restricted Mode
   vulnerability in iOS and iPadOS uncovered another vulnerability in the
   core code shared by all of Apple's operating systems. Without release
   notes that at least hint at the severity of this vulnerability, the
   unusual manner in which these were released is the only basis for
   recommending an immediate update. There's no need to drop everything,
   but install these updates sooner rather than later.

References

   Visible links
   1. https://tidbits.com/2025/02/10/ios-18-3-1-ipados-18-3-1-and-ipados-17-7-5-block-usb-restricted-mode-attack/
   2. https://support.apple.com/en-us/120283
   3. https://support.apple.com/en-us/109035
   4. https://support.apple.com/en-us/106337
   5. https://support.apple.com/en-us/121163
   6. https://support.apple.com/en-us/121164
   7. https://support.apple.com/en-us/100100

   Hidden links:
   8. https://tidbits.com/uploads/2025/02/no-CVE-entry-security-notes.png

.