Hackers Exploit 0-Day Gatekeeper Flaw to Attack macOS Computers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-7463 | In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper… | 5.5 | <1% | ||
| CVE-2021-1825 | An input validation issue was addressed with improved input validation | 6.1 | 1% | ||
| CVE-2021-30657 | Actively Exploited Gatekeeper Bypass in Apple macOS | 5.5 | 69% | KEV | KEV |
| CVE-2021-30661 | Use-After-Free in Apple WebKit Enables Code Execution via Malicious Web Content | 8.8 | 4% | KEV | KEV |
From the original article
3 min read at thehackernews.com
Security is only as strong as the weakest link. As further proof of this, Apple released an update to macOS operating systems to address an actively exploited zero-day vulnerability that could circumvent all security protections, thus permitting unapproved software to run on Macs. The macOS flaw, identified as CVE-2021-30657 , was discovered and reported to Apple by security engineer Cedric Owens on March 25, 2021.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.