High · published August 24, 2021
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 90.8th percentile for exploit probability.
🚨 A crafty app could slip in and execute any code it wants on your device — that’s the vulnerability lurking in iOS and macOS!⚡️ Picture a hotel where a guest can easily sneak into the staff-only areas and control the entire front desk without permission. This type confusion issue allows malicious applications to bypass security and operate with kernel privileges, just like that uninvited guest taking control! If exploited, this vulnerability could lead to an attacker running arbitrary code at the kernel level, potentially taking over your device completely. This means they could access sensitive data, install malware, or even manipulate system operations, leaving your personal information and privacy at risk. Absolutely devastating!
Picture a hotel where a guest can easily sneak into the staff-only areas and control the entire front desk without permission. This type confusion issue allows malicious applications to bypass security and operate with kernel privileges, just like that uninvited guest taking control! This type confusion flaw arises from improper state handling, allowing a malicious application to execute arbitrary code with kernel privileges, which can jeopardize the integrity of your system.
If exploited, this vulnerability could lead to an attacker running arbitrary code at the kernel level, potentially taking over your device completely. This means they could access sensitive data, install malware, or even manipulate system operations, leaving your personal information and privacy at risk. Absolutely devastating! To protect your devices, immediately update to iOS 12.5.5, iOS 14.4, or macOS Big Sur 11.2. Ensure all Security Updates for Catalina and Mojave are installed as well. Don’t leave your doors open! You’ve got this! Follow these steps, and you’ll have your devices secured in no time! 🛡️