Apple's iOS 27.2.1 update fails to fix security vulnerabilities in encrypted wallets
2026-11-11 19:16:48
According to CoinMeta, Apple's security update on February 27, 2023, did not fix a vulnerability known as "worse_query," which could potentially expose encryption wallet credentials. Researchers stated that this vulnerability still existed in the beta versions of February 27, 2023, and March 27, 2023, contradicting Apple's claim that the update had resolved the issue. Apple released this update on November 9, just one day before the source code of the vulnerability was made public. The security notes for the update listed several fixes but did not mention "worse_query." Experts warned that malicious applications could exploit this vulnerability to access sensitive files of other apps, potentially exposing private keys and mnemonic phrases. On November 10, Apple pledged to update its documentation after a valid fix was released. This vulnerability affects Apple products from version 26.0 to 27.2 and is described by researchers as the successor to an earlier vulnerability called "bad_query."
Bullish 0
Bearish 0
Source:Cryptonews
This content is for market information only and does not constitute investment advice.