watchOS 10.0.1 安全性更新

2023-09-27

Apple Watch 的系統2023年09月22日推出了最新版本的 watchOS 10.0.1，適用 Apple Watch 4 或之後的型號進行更新，此版本更新沒有新增加功能，根據 Apple 官方的說明主要為安全性更新，主要修復了兩個安全性問題，建議所有使用者進行更新。

Apple 對於 watchOS 10.0.1 更新說明
watchOS 10.0.1 更新項目
watchOS 更新方法

更新版本：watchOS 10.0.1

Apple 對於 watchOS 10.0.1 更新說明

此版本更新沒有新增加功能，根據 Apple 官方的說明主要為安全性更新，修正了核心（Kernel）本地攻擊者可能能夠提升其權限，安全（Security）惡意 app 可能能夠繞過簽章驗證。此次更新主要修正個兩個安全性問題，建議所有使用者進行更新。

以下是 Apple 對於此版本更新說明：

Kernel

Available for: Apple Watch Series 4 and later
Impact: A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Description: The issue was addressed with improved checks.
CVE-2023-41992: Bill Marczak of The Citizen Lab at The University of Toronto’s Munk School and Maddie Stone of Google’s Threat Analysis Group

Security

Available for: Apple Watch Series 4 and later
Impact: A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Description: A certificate validation issue was addressed.
CVE-2023-41991: Bill Marczak of The Citizen Lab at The University of Toronto’s Munk School and Maddie Stone of Google’s Threat Analysis Group