VulnerabilitycriticalExploited in the wild

Apple Releases Urgent iPhone and iPad Updates to Patch New Zero

The Hacker Newsby @TheHackersNewsOct 20, 2021 · 05:21 UTC (Oct 20, 2021)2 min read3 · 2 reads

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-30883 CVE-2021-30807 CVE-2021-1782 CVE-2021-1870 CVE-2021-1871 CVE-2021-1879 CVE-2021-30657 CVE-2021-30661 CVE-2021-30663 CVE-2021-30665 CVE-2021-30666 CVE-2021-30713 CVE-2021-30761 CVE-2021-30762 CVE-2021-30858 CVE-2021-30860 CVE-2021-30869

Tags: cve-2021-30883 cve-2021-30807 cve-2021-1782 cve-2021-1870 cve-2021-1871 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-1782	Race Condition Privilege Escalation in Apple iOS, macOS, watchOS, and tvOS	7.0	2%	KEV	Apr 2, 2021 KEV Nov 3, 2021
CVE-2021-1870 +1 related CVE CVE-2021-1871	WebKit Logic Flaw Enables Remote Code Execution on iOS, iPadOS, and macOS	9.8	8%	KEV	Apr 2, 2021 KEV Nov 3, 2021
CVE-2021-1879	Universal XSS in Apple WebKit on iOS, iPadOS, and watchOS (Actively Exploited)	6.1	7%	KEV	Apr 2, 2021 KEV Nov 3, 2021
CVE-2021-30713 +1 related CVE CVE-2021-30657	Privacy Preferences (TCC) Bypass in Apple macOS, Actively Exploited	7.8 group max	7%	KEV	Sep 8, 2021 KEV Nov 3, 2021
CVE-2021-30661 +2 related CVEs CVE-2021-30665 CVE-2021-30663	Use-After-Free in Apple WebKit Enables Code Execution via Malicious Web Content	8.8	4%	KEV	Sep 8, 2021 KEV Nov 3, 2021
CVE-2021-30762 +2 related CVEs CVE-2021-30761 CVE-2021-30666	Use-After-Free in Apple iOS WebKit Enables RCE via Crafted Web Content	8.8	11%	KEV	Sep 8, 2021 KEV Nov 3, 2021
CVE-2021-30807	Memory Corruption in Apple iOS, iPadOS, macOS, watchOS Allows Kernel Code Execution	7.8	29%	KEV	Oct 19, 2021 KEV Nov 3, 2021
CVE-2021-30858 +1 related CVE CVE-2021-30869	Use-After-Free in WebKit on Apple iOS, iPadOS, and macOS Allows Arbitrary Code Execution	8.8 group max	13%	KEV	Aug 24, 2021 KEV Nov 3, 2021
CVE-2021-30860 +1 related CVE CVE-2021-30883	Integer Overflow in Apple PDF Processing Enables Arbitrary Code Execution (CVE-2021-30860)	7.8	76%	KEV	Aug 24, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

Apple on Monday released a security update for iOS and iPad to address a critical vulnerability that it says is being exploited in the wild, making it the 17th zero-day flaw the company has addressed in its products since the start of the year.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.