Stefan Mileschin

Milestones

Apple rolled out an urgent security update for iOS, iPadOS, and macOS to address a zero-day flaw that it said may have been actively exploited.

This is the 30th such vulnerability Apple has patched since the start of this year. Which shows how supercool and secure the software is.

The updates, which arrive less than a week after the company released iOS 14.7, iPadOS 14.7, and macOS Big Sur 11.5 to the public, fixes a memory corruption issue (CVE-2021-30807) in the IOMobileFrameBuffer component, a kernel extension for managing the screen framebuffer, that could be abused to execute arbitrary code with kernel privileges.

The company said it addressed the issue with improved memory handling, noting it's "aware of a report that this issue may have been actively exploited".

Apple has refused to provide additional details about the flaw and have not been disclosed apparently to prevent the weaponization of the vulnerability for additional attacks, although if Apple had really fixed the flaw surely there is no harm in talking about it.

https://fudzilla.com/news/53294-appl...patch-for-2021