Apple fixes three actively exploited iOS zero-days
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-1782 | Race Condition Privilege Escalation in Apple iOS, macOS, watchOS, and tvOS | 7.0 | 2% | KEV | KEV |
CVE-2021-1870+1 related CVE | WebKit Logic Flaw Enables Remote Code Execution on iOS, iPadOS, and macOS | 9.8 | 8% | KEV | KEV |
From the original article
1 min read at helpnetsecurity.com
Apple has release a new batch of security updates and has fixed three iOS zero-days that “may have been actively exploited” by attackers. Two of the zero-day vulnerabilities (CVE-2021-1870 and CVE-2021-1871) are logic issues affecting the WebKit browser engine, which may allow a remote attacker to achieve code execution on devices running a vulnerable version of iOS or iPadOS (i. e.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.