Apple Releases iOS and iPadOS 14.4.2 to Fix Actively Exploited Security Vulnerability - MacRumors
Skip to Content

Apple Releases iOS and iPadOS 14.4.2 to Fix Actively Exploited Security Vulnerability

Apple today released iOS and iPadOS 14.4.2, minor security updates that come close to three weeks after the release of iOS/iPadOS 14.4.1 and more than a month after the iOS/iPadOS 14.4 updates.

iOS 14
The iOS and iPadOS 14.4.2 updates can be downloaded for free and the software is available on all eligible devices over-the-air in the Settings app. To access the new software, go to Settings > General > Software Update.

According to Apple's release notes, the software provides an important security fixes and should be installed by all users. A security support document says that the update fixes a vulnerability that was actively exploited.

Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited.

Apple has fixed the issue by improved management of object lifetimes.

Apple has also released iOS and iPadOS 12.5.2, security updates that are available for older devices.

Related Forum: iOS 14

Popular Stories

Apple Event Logo

Apple Just Released a New Accessory

Monday May 4, 2026 8:13 am PDT by
Apple today released a new Pride Edition Sport Loop for the Apple Watch. The band features a rainbow design with 11 colors of woven nylon yarns. The new Pride Edition Sport Loop is available to order now on Apple.com and in the Apple Store app in 40mm, 42mm, and 46mm sizes, and it will be available at Apple Store locations starting later this week. In the U.S., the band costs $49. There...
iOS 26

Apple Says iOS 26.5 Adds Three New Features to Your iPhone

Tuesday May 5, 2026 7:36 am PDT by
iOS 26.5 includes three new features for iPhones, according to Apple's release notes for the update, which is expected to be released next week. As discovered during beta testing, iOS 26.5 enables end-to-end encryption for RCS messaging between iOS and Android devices. Apple says this security upgrade is limited to supported carriers around the world and will continue to roll out....
Instagram Feature 2

PSA: Instagram Encrypted Messaging Ends on Friday, May 8

Tuesday May 5, 2026 8:24 am PDT by
Instagram will remove end-to-end encryption for direct messages between users from May 8, 2026. When the date comes around, Meta will potentially be able to see the contents of all messages between users on the social media platform. Encrypting messages has been an optional feature in Instagram since 2023, but in March of this year the social media platform quietly updated a help page to say ...

Top Rated Comments

ouimetnick Avatar
67 months ago
It’s pretty amazing that an iPhone 5S from 2013 is still being supported with security updates. Hopefully they support the HomePod for 7+ years.
Score: 48 Votes (Like | Disagree)
wsklar528 Avatar
67 months ago
Just release 14.5 already
Score: 29 Votes (Like | Disagree)
67 months ago
"Apple Releases iOS and iPadOS..." Yyyyyeeesssss....

"...14.4.2" Nooooooo....

:)
Score: 20 Votes (Like | Disagree)
AppleTO Avatar
67 months ago
Man, I wish default apps didn’t require a whole OS update in order to be updated.
Score: 19 Votes (Like | Disagree)
67 months ago

Just release 14.5 already
Trust me, it's not ready. Seeing this 14.4.2 makes me think there will likely be a 14.5B6 next week, if not sooner.
Score: 17 Votes (Like | Disagree)
Apple_Robert Avatar
67 months ago

I want 14.5
You will take what Apple gives you and like it. :P
Score: 16 Votes (Like | Disagree)