If you have an iPhone or iPad, you need to update your devices immediately! Apple has announced a new zero-day vulnerability that affects a large number of phones and tablets. The company says that the vulnerability is likely being exploited by cybercriminals. However, Apple has released iOS 15.0.2 and iPadOS 15.0.2, so you can protect your iPhone and iPad from the zero-day vulnerability.
See also: Apache: Zero-day vulnerability allows remote code execution
The new iOS and iPadOS update fixes other issues, but perhaps the most important is this one because it's security-related. Apple issued an emergency statement and said that the zero-day vulnerability affects the following devices: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation).
The flaw is located in IOMobileFrameBuffer , and according to the company, if exploited properly, hackers could use it to execute arbitrary code with kernel privileges on targeted devices. This means that attackers could, thanks to the zero-day vulnerability, completely compromise your iPhone or iPad and do whatever they want, such as steal data or install malware.
See also: Emergency Chrome update fixes two zero-day vulnerabilities
Apple said the zero-day vulnerability in iPhones and iPads was discovered by an “anonymous researcher,” but did not provide further details about how it was discovered. The vulnerability has been listed as CVE-2021-30883.
At this time, it is not clear whether the vulnerability has been used on a large scale by criminals. However, this does not matter. The vulnerability exists and could put your devices at risk. Therefore, if you have any of the above iPhone or iPad models, update them immediately to the new iOS 15.0.2 and iPadOS 15.0.2 versions that Apple has released.
See also: Apple: Users don't seem excited about the iPhone 13
Apple has been hit with a slew of vulnerabilities this year. According to The Record, today's update represents the 17th patch to fix zero-day vulnerabilities this year alone. The previous major patch came in September when the company issued an emergency security update for a vulnerability that left 1.65 billion devices vulnerable to spyware.
Source: Gizmodo
