Apple patches three zero-day vulnerabilities in iOS, iPadOS and tvOS
Apple has released fixes for three vulnerabilities in iOS, iPadOS and tvOS. All three vulnerabilities (CVE-2021-1782, CVE-2021-1870 and CVE-2021-1871) were fixed in iOS 14.4 and iPadOS 14.4 for iPhone 6s and newer, iPad Air 2 and newer, iPad mini 4 and newer models and the iPod touch 7th generation. Patches have also been released for Apple TV 4K and Apple TV HD.
CVE-2021-1782: vulnerability affecting the OS kernel. With its help, the application can increase its privileges on the system.
CVE-2021-1870 and CVE-2021-1871: errors in the WebKit browser engine. Their successful exploitation allows remote code execution.
Source: securitylab.ru
27 January 2021