Apple released a new security update for iOS 12 and iCloud that seal several vulnerabilities. For iOS, these updates solve the problem that existed with passcode bypasses, and for iCloud, many updates are released that address critical vulnerabilities. The updates also include a hotfix for the charging problems that appeared on the new iPhone, as well as for the WiFi malfunction.
With the release of iOS 12.0.1, Apple «sealed» two basic security gaps that existed in QuickLook and VoiceOver, which allowed bypassing the lock screen, and gave access to contacts, photos, and email. Both these vulnerabilities were discovered by Jose Rodriguez, who also made a video guide on Youtube, showing how you can exploit them.
The exploitation of these two vulnerabilities is done through a large series of steps, and from Jose's videos it appears that it is not easy. The vulnerabilities have been assigned the CVE IDs CVE-2018-4380 and CVE-2018-4379 respectively. Below you can find the video in which the vulnerabilities are exploited.
With the release of iCloud for Windows 7.7.12, Apple is closing 19 security holes, 13 of which are considered critical, as they could allow unauthorized code execution. These types of vulnerabilities are the most dangerous, as they allow hackers to do whatever they want, even taking complete control of the system.
Below is the code name of all the vulnerabilities that were fixed:
CVE-2018-4191, CVE-2018-4311, CVE-2018-4316, CVE-2018-4299, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4319, CVE-2018-4309, CVE-2018-4197, CVE-2018-4306, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4317, CVE-2018-4318, CVE-2018-4345, and CVE-2018-4361
