Exploit / PoCcritical

Apple addresses a new zero-day exploited to deploy the Pegasus spyware

Security Affairsby @securityaffairsSep 23, 2021 · 20:49 UTC (Sep 23, 2021)1 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2021-30860 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-30860 CVE-2021-30858 CVE-2021-30869

Tags: cve-2021-30860 cve-2021-30858 cve-2021-30869 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-30858 +1 related CVE CVE-2021-30869	Use-After-Free in WebKit on Apple iOS, iPadOS, and macOS Allows Arbitrary Code Execution	8.8 group max	13%	KEV	Aug 24, 2021 KEV Nov 3, 2021
CVE-2021-30860	Integer Overflow in Apple PDF Processing Enables Arbitrary Code Execution (CVE-2021-30860)	7.8	76%	KEV	Aug 24, 2021 KEV Nov 3, 2021

From the original article

1 min read at securityaffairs.com

Apple has addressed three zero-day vulnerabilities exploited by threat actors in attacks in the wild to take over iPhones and Macs. Apple has released security updates to address three zero-day vulnerabilities exploited in attacks in the wild to compromise iPhones and Macs running vulnerable iOS and macOS versions.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.