iOS version 11.2.2 was released on Jan 8, 2017 to help mitigate the Spectre vulnerability. The detailed explanation of the vulnerabilities can be found in Appthority’s blog on Meltdown & Spectre. Two CVE numbers are filed and the improvements are made mainly in Safari and WebKit. Apple credits several researchers from various universities and Project Zero in the mitigation effort.
Enhance Your Security by Keeping Up with OS Updates
Enterprise users should note that, although Apple has fixed a range of vulnerabilities with the 11.2 update, the security benefits are not reflected on devices unless users update the OS to this latest version. Thus, before attackers exploit these vulnerabilities, enterprise users should go to “Settings > General > Software Update” and update their iOS devices to the latest version.
OS updates are among the easiest and most cost-effective ways to prevent attacks from exploiting holes in older operating systems and we certainly recommend updating to this latest OS release given the numerous security updates it provides.