iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 Fix Actively Exploited Vulnerabilities - MacRumors
Skip to Content

iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 Fix Actively Exploited Vulnerabilities

Apple today released iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 for the iPhone, iPad, and Mac, respectively, and it's a good idea to install them as soon as you can because all three updates include important security fixes.

iphone 14 red
According to Apple's security support documents for iOS and macOS, the new software includes fixes for two separate vulnerabilities, both of which were known by Apple to have been actively exploited in the wild.

The IOSurfaceAccelerator vulnerability could allow an app to execute arbitrary code with kernel privileges. Apple addressed the out-of-bounds write issue with improved input validation. The WebKit vulnerability could allow maliciously crafted web content to execute code. Apple fixed this issue with improved memory management.

Google's Threat Analysis Group and Amnesty International's Security Lab are credited with finding and reporting both issues to Apple.

Apple has also released a new Safari 16.4.1 update for macOS Monterey and macOS Big Sur, which likely addresses the WebKit vulnerability.

Related Forums: iOS 16, macOS Ventura

Popular Stories

iOS 27 Next to iPhone

Here's When iOS 27 Rolls Out Today in Every Time Zone [Update: It's Out]

Sunday September 13, 2026 3:00 am PDT by
Update 10:04 a.m.: iOS 27 is rolling out now, though it may take a bit for all users to see it, so keep checking! Apple is about to release iOS 27, which will finally deliver more advanced Siri AI capabilities as well as a variety of other refinements, improvements, and new features to iPhones. It's Apple's biggest software update of the year, and Apple announced at Wednesday's iPhone event...
iOS 27 Icon iPhone

iOS 27 Available Now With These 8 New Features

Monday September 14, 2026 9:00 am PDT by
Update — 10 a.m. Pacific Time: Apple has released iOS 27. During its iPhone 18 Pro and iPhone Duo event last week, Apple announced that iOS 27 will be released widely on Monday, September 14. iOS 27 should be available around 10 a.m. Pacific Time / 1 p.m. Eastern Time today via the Settings app, under General → Software Update. Below, we have highlighted eight new features and...
Apple iCloud Plus expansion hero

iCloud+ Now Includes Apple TV, Apple Arcade, and Curated Apple Music Stations in Over 100 Countries

Tuesday September 15, 2026 1:43 am PDT by
Apple today announced a new subscription initiative that turns paid iCloud+ subscriptions into a broader services bundle in more than 100 countries. In select countries, Apple says every paid iCloud+ plan, including the cheapest 50GB tier, now includes Apple TV and Apple Arcade "at no additional cost," while family sharing extends the storage, TV and Arcade access to up to five people....

Top Rated Comments

45 months ago
Isn't this the whole purpose of that rapid security release feature that was new to iOS 16? Why aren't they using that instead?
Score: 24 Votes (Like | Disagree)
I7guy Avatar
45 months ago
Not gonna lie, gonna press that update button after this post.
Score: 22 Votes (Like | Disagree)
45 months ago

Good grief, nothing but actively exploited vulnerabilities these days. I’m ready to thin the herd of update-needy devices.
Enjoy your Etch-a-Sketch, then. :)
Score: 16 Votes (Like | Disagree)
snow755 Avatar
45 months ago

god, irritating as hell. They couldn't hold off on the 16.4 release to incorporate this security update into it? :mad:
just be happy they even updated at all lol remember back in the old days you where lucky that you got a IOS update once every 3 to 6 months
Score: 14 Votes (Like | Disagree)
Luap Avatar
45 months ago
Phew, what a relief! This one had been bugging me for literally nano seconds..

"Pushing hands emoji does not show skin tone variations"


;)
Score: 13 Votes (Like | Disagree)
45 months ago

god, irritating as hell. They couldn't hold off on the 16.4 release to incorporate this security update into it? :mad:
Clearly not, or else they would’ve.
16.4 already included something like 2 1/2 dozen security fixes over 16.3.1, i’m sure if it was possible for them to include one more they would have.
Score: 12 Votes (Like | Disagree)