{"uuid": "b858518b-681c-4618-a465-fe8ad8ca1cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30807", "type": "exploited", "source": "https://t.me/hacking_Attack/18036", "content": "Black Hat Ethical Hacking\nApple Patches Actively Exploited Zero-Day in iOS, MacOS\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Patches Actively Exploited Zero-Day in iOS, MacOSPost Views: 75 \nReading Time: 1 Minute\nCompany urges iPhone, iPad and Mac users to install updates to fix a critical memory corruption flaw that can allow for attackers to take over a system.\nApple patched a zero-day flaw on Monday, found in both its iOS and macOS platforms that\u2019s being actively exploited in the wild and can allow attackers to take over an affected system.\n\nThe memory-corruption flaw, tracked as CVE-2021-30807, is found in the IOMobileFrameBuffer extension which exists in both iOS and macOS, but has been fixed according to specific device platform.\n\nApple released three updates, iOS 14.7., iPadOS 14.7.1 and macOS Big Sur 11.5.1\u00a0to patch the vulnerability on each of the platforms Monday.\n\nExploiting CVE-2021-30807 can allow for threat actors \u201cto execute arbitrary code with kernel privileges,\u201d Apple said in documentation describing the updates.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said. Apple addressed the issue in each of the updates with \u201cimprove memory handling,\u201d the company said.\n\niOS devices that should be updated immediately are: iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation).\nSee Also: Microsoft: New Unpatched Bug in Windows Print Spooler\nThough Apple attributed the discovery of the bug to an \u201canonymous researcher,\u201d a security researcher at the Microsoft Security Response Center (MSRC) came forward separately on Monday and tweeted\u00a0that he had discovered the vulnerability some time ago but hadn\u2019t yet found the time to report it to Apple.\n\n\u201cSo, as it turns out, an LPE vulnerability I found 4 months ago in IOMFB is now patched in iOS 14.7.1 as in-the-wild,\u201d Saar Amar\u00a0wrote on Twitter, sharing a link\u00a0to \u201csome knowledge and details about the bug and some ways to exploit it.\u201d\n\nIn the linked documentation, Amar describes the vulnerability as \u201cstraightforward\u201d and existing \u201cin a flow called from the external method 83 of AppleCLCD/IOMFB\u00a0(which is IOMobileFramebufferUserClient::s_displayed_fb_surface).\u201d See Also: Offensive Security Tool: VoIPmonitor Sniffer To trigger the flaw, \u201csimply calling the external method 83 will do the job (and we can obtain the userclient to AppleCLCD/IMOFB\u00a0from the app sandbox),\u201d Amar wrote. He describes a proof of concept exploit in detail in his post.\n\nAmar said he planned to \u201cfind some extra time to work on it in August,\u201d but Apple released its updates patching the flaw before he got around to it.\n\n\u201cJust to be clear, I intended to submit this bug to Apple right after I\u2019ll finish the exploit [SIC],\u201d he wrote. \u201cI wanted to get a high- quality submission, but I did not have the time to invest in March.\u201d See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker As iPhone users update to fix yet another Apple zero-day, they also continue waiting\u00a0for the company to patch a flaw that makes their devices easy prey for Pegasus spyware. Last week leaked data suggested that the notorious Pegasus mobile spyware from Israeli-based NSO Group is exploiting\u00a0a zero-click zero-day in Apple\u2019s iMessage feature.\n\nThe news and evidence of a Pegasus spyware blitz spurred discussion\u00a0about the security of Apple\u2019s closed ecosystem and a call for accountability and potential changes to the company\u2019s security model.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:11.434052Z"}