If you have an older Mac running macOS Mojave or Catalina, you're recommended to download Safari 14.1 to strengthen your computer's security and protect your privacy.
Safari 14.1 Fixes Three WebKit Vulnerabilities
That's because the new Safari 14.1 patches WebKit vulnerabilities that permit bad actors to execute rogue code on your computer without user consent. WebKit is a layout engine used by Apple's own Safari browser and all third-party browsers on the iPhone and iPad.
The flaws are detailed in a support document on Apple's website.
There are three major vulnerabilities that Safari 14.1 patches, spanning WebKit, WebKit Storage, and WebKit RTC. In WebKit, Apple has addressed an input validation issue with improved input validation. This vulnerability let attackers craft malicious web content which could result in a cross-site scripting attack. This is a technique which enables malicious people to inject client-side scripts into web pages viewed by other users.
The WebKit Storage flaw allowed hackers to execute arbitrary code on a user’s device without consent via maliciously crafted web content. According to the company, "a use after free issue was addressed with improved memory management" in WebKit Storage.
The company has acknowledged that this particular flaw may have been actively exploited in the wild. Therefore, it's definitely a good idea to update to Safari 14.1 on your older Mac running the macOS Mojave or Catalina software. To do so, launch the System Preferences app and choose Software Update from the System Preferences window, then follow the onscreen instructions to download and install Safari 14.1.
Are Other Apple Devices at Risk?
The company has recently fixed WebKit security breaches on its other platforms. With the release of iOS and iPadOS 14.5.1, Apple patched the WebKit flaws on the iPhone, iPod touch, and iPad. On the Mac, the same issues were addressed with macOS Bug Sur 11.3.1.
And last but not least, Apple has also released iOS 12.5.3 which patches the WebKit flaws on older devices that are incompatible with the latest iOS 14 software, including the iPhone 5s and iPhone 6, iPad Air, iPad mini 2, iPad mini 3, and sixth-generation iPod touch.
