• Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Technologous - Managed IT Solutions Bryan/College Station

  • Home
  • About
    • Areas We Serve
    • Our Leadership
      • Chris Dawson
      • Ian Soares
  • IT Services
    • Managed IT
    • Support IT
    • Cloud IT
  • Blog
  • Request a Consultation
  • Contact
You are here: Home / Blog / Apple’s Update for Zero-Day

Apple’s Update for Zero-Day

Apple's Update for Zero-Day

Apple’s Update for Zero-Day. If you use an Apple device running iOS, you’ll want to update it to the latest version (14.2) immediately.

In the latest update, Apple has a patch for a trio of ‘Zero-Day Vulnerabilities’ hackers use to exploit systems without these patches.

The three issues addressed are as follows:

CVE-2020-27930 – This issue is a remote code execution flaw in the iOS FontParser that allows attackers to execute commands arbitrarily, passing them through this gateway.

CVE-2020-27932 – This is a privilege escalation issue in the kernel of iOS that allows an attacker to run malicious code with kernel-level privileges.

CVE-2020-27950 – This one is a memory leak in the iOS kernel that allows an attacker to retrieve content from any iOS device’s kernel memory.

The three flaws found in attacking the vulnerable systems, are allowing an attacker to take complete control of any vulnerable device.

The fixes for the issues described above are also available for iPadOS, with the release of version 14.2, watchOS 5.3.8, 6.2.9, and 7.1. So, if you have an older generation iPhone, you can also have protection by downloading iOS version 12.4.9.

These issues appear to be related to a trio of recently discovered and patched flaws in ChromeOS and a single Zero-Day issue found in Windows 10. According to Shane Huntley, the Director of Google’s Threat Analysis Group, none of the recently discovered issues had anything to do with any election targeting. Although, Google declines to provide specific details about how these attacks work or their targets.

Zero-Day Vulnerabilities are as serious, so even if you’re not generally in a big rush updating your system, you need to make an exception in this case. 

Kudos to Google for launching the Zero-Day project and to Apple for their fast action in addressing these recently discovered issues and patching them in a bid to help keep their users safe. 

November 20, 2020 Filed Under: Blog Tagged With: Apple, Windows 10, Zero Day

Primary Sidebar

GET OUR BLOG IN YOUR EMAIL!

Archives

  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • April 2020
  • March 2020
  • February 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • August 2018

Tags

adobe android App Apple attack Attacks Breach Browser Chrome Dark Web Data Database Data Breach Email Facebook Firefox gmail Google Google Chrome government hacker Hackers information Intel iOS iPhone malware Microsoft Microsoft edge Microsoft Windows 10 office 365 pandemic Password Passwords patch Phishing Phishing emails ransomeware Ransomware security Update Vulnerability Wifi Windows Windows 10

Footer

Contact Us

Address: 3091 University Drive, Unit 210, Bryan, Texas 77802
Phone: 979-217-1226

Our Blog

  • Apple Updates Fix Security Flaws on Most Devices March 19, 2021
  • Sendgrid Uses Zoom Invites to Steal Credentials March 18, 2021
  • Browser Wars Heat Up With Microsoft Edge Boosting Speeds March 18, 2021
  • Microsoft’s Exchange Prevents Phishing And Ransomware March 17, 2021
  • Ransomware Attackers Demand 20 Million From U.S. Kia Motors March 12, 2021

Search

Follow Us

  • Facebook
  • Home
  • About
  • Resources
  • Contact
  • Our Leadership
  • Why Choose Us?
  • IT Services
  • Request a Consultation

Copyright © 2021| All Rights Reserved | Powered By Technologous, LLC | Log in