A fully patched iWork installation from this era—i.e., running on macOS Sierra (10.12) or later, or the corresponding iOS versions on iOS 10 or later—ensures protection against critical CVEs. Without the patches from 2014, 2015, and particularly the March 2017 update, users remain vulnerable to arbitrary code execution via malicious files and data exposure through weak PDF encryption. For anyone serious about digital security, verifying that iWork has been updated to at least these 2017 versions is not just a best practice—it is a necessity.
One of the most significant milestones in this period was the addressing of . Before this fix, iWork used a 40-bit RC4 encryption algorithm for password-protected PDFs—a standard that had become dangerously easy to crack.
For enterprise environments, educational institutions, and users operating vintage Mac hardware, legacy software suites present a persistent attack surface. Between 2014 and 2017, Apple introduced major structural overhauls to its signature productivity bundle, iWork. While these updates improved cross-platform functionality between macOS and iOS, they also left technical debt that modern threat actors could exploit.