If you up to date your iPhone to iOS 16.3 final month, you bought just a few new options, together with assist for the brand new HomePod, and a dozen safety updates. Because it seems, there have been really 15 safety updates—Apple simply didn’t inform us about three of them till this week.

It’s not clear why Apple didn’t disclose the updates, which had been additionally a part of macOS 13.2, till February 20, however Apple says it “doesn’t disclose, talk about, or affirm safety points till an investigation has occurred and patches or releases can be found.” Apple additionally revealed a beforehand undisclosed safety patch in iOS 16.3.1 and macOS 13.2.1 this week.

In two of the updates, an app could possibly execute arbitrary code in your machine. Listed below are the small print of the three new fixes:

Crash Reporter

• Out there for: iPhone 8 and later, iPad Professional (all fashions), iPad Air third technology and later, iPad fifth technology and later, and iPad mini fifth technology and later; macOS Ventura
• Affect: A consumer could possibly learn arbitrary information as root
• Description: A race situation was addressed with extra validation.
• CVE-2023-23520: Cees Elzinga

Basis

• Out there for: iPhone 8 and later, iPad Professional (all fashions), iPad Air third technology and later, iPad fifth technology and later, and iPad mini fifth technology and later; macOS Ventura
• Affect: An app could possibly execute arbitrary code out of its sandbox or with sure elevated privileges
• Description: The problem was addressed with improved reminiscence dealing with.
• CVE-2023-23530: Austin Emmitt, Senior Safety Researcher at Trellix ARC

Basis

• Out there for: iPhone 8 and later, iPad Professional (all fashions), iPad Air third technology and later, iPad fifth technology and later, and iPad mini fifth technology and later; macOS Ventura
• Affect: An app could possibly execute arbitrary code out of its sandbox or with sure elevated privileges
• Description: The problem was addressed with improved reminiscence dealing with.
• CVE-2023-23531: Austin Emmitt, Senior Safety Researcher at Trellix ARC

If you happen to haven’t up to date to iOS 16.3, Apple is now not signing it, which suggests you’ll need to replace to iOS 16.3.1, which can embody the fixes and options from iOS 16.3.