eliteakp.blogg.se

Successful exploitation of the vulnerability allows an application to execute arbitrary code with kernel privileges, and spyware like Pegasus can be easily deployed on affect devices, and exploiting other vulnerabilities, it will get access to a device.įollowing are the recent exploits and respective iOS and iPadOS versions in which they have been fixed by Apple since Jan 2021:ĬVE-2021-1870, CVE-2021-1871, CVE-2021-1782 – Fixed in iOS and iPadOS 14.4ĬVE-2021-1879 – Fixed in iOS and iPadOS 14.4.2ĬVE-2021-30661 – Fixed in iOS and iPadOS 14.5ĬVE-2021-30665, CVE-2021-30663, CVE-2021-30666, CVE-2021-30661 – Fixed in iOS and iPadOS 14.5.1 and iOS 12.5.3ĬVE-2021-30761, CVE-2021-30762 – Fixed in iOS 12.5.4ĬVE-2021-30807 – Fixed in iOS and iPadOS 14.7.1ĬVE-2021-30860, CVE-2021-30858, CVE-2021-30869 – Fixed in iOS and iPadOS 14.8 and iOS 12.5.5 Integer Overflow VulnerabilityĪpple released a patch to fix integer overflow critical vulnerability (CVE-2021-30883).

This year, Apple has released multiple emergency releases to fix the actively exploited vulnerabilities which Apple is aware of a report that this issue may have been actively exploited. “ Apple is aware of a report that this issue may have been actively exploited,” the company said in security advisories.

Qualys recommends that security teams should immediately update all devices running iOS and iPadOS to the latest version. Apple recently released iOS and iPadOS 15.0.2 as an emergency security update that addresses 1 critical zero-day vulnerabilities, which is exploited in wild.