{"vulnerability": "CVE-2021-1879", "sightings": [{"uuid": "f024388b-f298-4331-8f8f-21990f3efc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "MISP/7c0c03bf-c3e1-4aca-9c10-a87d277e667c", "content": "", "creation_timestamp": "2021-07-15T09:57:30.000000Z"}, {"uuid": "313ddcfb-3147-426b-a2d0-b101a7384608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "MISP/88da373a-19b1-4e4b-b77a-a43397ea0695", "content": "", "creation_timestamp": "2021-07-16T09:34:02.000000Z"}, {"uuid": "15d365d1-020a-4a75-ae90-85c107716a14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "fe057cb0-9c64-4213-af1f-6ccabde16894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "21056857-f985-41dd-b246-c719a7d3fab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971136", "content": "", "creation_timestamp": "2024-12-24T20:24:47.001558Z"}, {"uuid": "75138799-08b9-4627-95e0-5f66b4387e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:51.000000Z"}, {"uuid": "74e3d35b-818c-4fce-a0ef-3d75583525c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=565", "content": "", "creation_timestamp": "2021-03-29T04:00:00.000000Z"}, {"uuid": "234eff3b-ca1c-4aac-bcd2-3d8babc36f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f940dd78-c8e7-4917-8179-bc9dd88f28dd", "content": "", "creation_timestamp": "2026-02-02T12:28:37.487331Z"}, {"uuid": "df4b7ce0-24e2-456b-91bf-f67f02abcf8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/cKure/4555", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Apple fixes iOS zero-day vulnerability exploited in the wild (iOS and iPadOS 14.4.2)\n\nCVE-2021-1879: Clement Lecigne of Google Threat Analysis Group\u00a0and Billy Leonard of Google Threat Analysis Group\n\nVector: uXSS\n\nhttps://www.bleepingcomputer.com/news/security/apple-fixes-ios-zero-day-vulnerability-exploited-in-the-wild/", "creation_timestamp": "2021-03-26T21:03:08.000000Z"}, {"uuid": "05046249-8b2e-46fc-97f1-f1093e0854a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "Telegram/UGEJu_WWAA1mHWluP8U07T2RNN1KH248adKMvX1-F1pq2PDX", "content": "", "creation_timestamp": "2025-03-02T11:45:36.000000Z"}, {"uuid": "70c869cf-d9b4-4882-8138-49335fcccfec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/alexmakus/3986", "content": "iOS and iPadOS 14.4.2 address a vulnerability that Apple says may have been actively exploited\n\nCVE-2021-1879: Clement Lecigne of Google Threat Analysis Group\u00a0and Billy Leonard of Google Threat Analysis Group\n\nImpact: Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited.\n\n\u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u0442\u0430\u043a\u043e\u0433\u043e \u043d\u0435 \u0431\u044b\u043b\u043e, \u0438 \u0432\u043e\u0442 \u043e\u043f\u044f\u0442\u044c!", "creation_timestamp": "2021-03-26T18:13:06.000000Z"}, {"uuid": "fd3864f6-e9ff-4b59-878d-942773bdd095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "published-proof-of-concept", "source": "https://t.me/alexmakus/4175", "content": "\u0442\u0443\u0442 \u043e\u0447\u0435\u043d\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e SolarWinds, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f 0-day \u0434\u043b\u044f iPhone. \u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SW \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 iOS 0-day \u0441 \u0446\u0435\u043b\u044c\u044e \u043a\u0440\u0430\u0436\u0438 \u043b\u043e\u0433\u0438\u043d\u043e\u0432-\u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0447\u043b\u0435\u043d\u043e\u0432 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d. \n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2021-1879 \u0432 Safari, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u043e\u0441\u0442\u0435 Google \u2014\u00a0\u0441\u0443\u0442\u044c \u0435\u0451 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d\u0430 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0434\u043e\u043c\u0435\u043d\u044b, \u0433\u0434\u0435 \u043d\u0430 iPhone \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u043b\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442. \u0412\u0441\u0435 \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u043d\u0433\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u041e\u0421, \u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iOS-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043a\u0430\u043a \u0440\u0430\u0437 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c CVE-2021-1879, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u043a\u0443\u043a\u0438\u0441\u044b \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430. \n\nAfter several validation checks to ensure the device being exploited was a real device, the final payload would be served to exploit CVE- 2021-1879. This exploit would turn off Same-Origin-Policy protections in order to collect authentication cookies from several popular websites, including Google, Microsoft, LinkedIn, Facebook, and Yahoo and send them via WebSocket to an attacker-controlled IP. The victim would need to have a session open on these websites from Safari for cookies to be successfully exfiltrated. There was no sandbox escape or implant delivered via this exploit. The exploit targeted iOS versions 12.4 through 13.7.\n\n\u0414\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 \nhttps://blog.google/threat-analysis-group/how-we-protect-users-0-day-attacks/", "creation_timestamp": "2021-07-15T12:53:39.000000Z"}, {"uuid": "4ed17ab6-c04b-4931-a2f9-340d7e0e16b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/arpsyndicate/1089", "content": "#ExploitObserverAlert\n\nCVE-2021-1879\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2021-1879. This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited..\n\nFIRST-EPSS: 0.002140000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2023-12-04T02:12:02.000000Z"}, {"uuid": "a11e3d8e-a1c8-4a36-bf36-c2a9ab95ca79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/true_secator/1566", "content": "\u041d\u0430 \u0432\u0441\u044f\u043a\u0438\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u043c, \u0447\u0442\u043e \u0432 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u0432\u0435\u0447\u0435\u0440\u043e\u043c Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f iOS, iPadOS \u0438 watchOS, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-1879.\n\n\u041e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 Webkit (\u0435\u0441\u043b\u0438 \u043d\u0430\u043c \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0441\u043a\u043b\u0435\u0440\u043e\u0437 - \u044d\u0442\u043e \u0443\u0436\u0435 \u0448\u0435\u0441\u0442\u0430\u044f 0-day \u0432 WebKit \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google Threat Analysis Group. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433 (XSS). \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043d\u0435\u0442. \u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0433\u043e\u0432\u043e\u0440\u044f\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0423 \u043d\u0430\u0441 \u0441\u0440\u0430\u0437\u0443 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0435 - \u0430 \u043d\u0435 \u0442\u0430 \u043b\u0438 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0430\u0448\u043b\u0438 Google Project Zero \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e \u0442\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 \u043f\u043e\u043b\u043e\u043c\u0430\u043b\u0438 \u043a\u043e\u043d\u0442\u0440\u0442\u0435\u0440\u0440\u043e\u0440\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431? \n\n\u041a\u0430\u043a \u0431\u044b \u0442\u0430\u043c \u043d\u0438 \u0431\u044b\u043b\u043e, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u044f\u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.", "creation_timestamp": "2021-03-29T12:21:00.000000Z"}, {"uuid": "844930d5-8f86-4261-8c58-b69dafee7b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/true_secator/1763", "content": "\u0421\u0442\u043e\u044f\u0449\u0438\u0435 \u0437\u0430 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u043e\u0439 \u043d\u0430 SolarWinds \u0445\u0430\u043a\u0435\u0440\u044b Nobelium, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u043e\u0439, \u0432\u043d\u043e\u0432\u044c \u0432 \u0434\u0435\u043b\u0435.\n\nMicrosoft Threat Intelligence Center (MSTIC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u043d\u0430 3000 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 150 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0433\u0443\u043c\u0430\u043d\u0438\u0442\u0430\u0440\u043d\u043e\u0439 \u0438 \u043f\u0440\u0430\u0432\u043e\u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0439 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 24 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0421\u0428\u0410. \n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0435\u0449\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2021 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u043b\u0430\u0441\u044c \u0432 \u0441\u0435\u0440\u0438\u044e \u0430\u0442\u0430\u043a, \u043a\u0443\u043b\u044c\u043c\u0438\u043d\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u043b\u043d\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u0430, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0439 \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e\u043c \u0421\u0428\u0410 \u043f\u043e \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u043c\u0443 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044e (USAID) \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043c\u0430\u0440\u043a\u0435\u0442\u0438\u043d\u0433\u0430 Constant Contact.\n\n\u0412 \u043f\u0438\u0441\u044c\u043c\u0430\u0445 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 USAID \u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u044d\u043a\u0441-\u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043e\u043c \u0421\u0428\u0410 \u0414\u043e\u043d\u0430\u043b\u044c\u0434\u043e\u043c \u0422\u0440\u0430\u043c\u043f\u043e\u043c \u043d\u043e\u0432\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043e \u00ab\u0444\u0430\u043b\u044c\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0431\u043e\u0440\u043e\u0432\u00bb, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043f\u043e \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044e \u0422\u0440\u0430\u043c\u043f\u0430, \u0438\u043c\u0435\u043b\u0438 \u043c\u0435\u0441\u0442\u043e, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d \u043f\u0440\u043e\u0438\u0433\u0440\u0430\u043b \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0443 \u0414\u0436\u043e \u0411\u0430\u0439\u0434\u0435\u043d\u0443.\n\n\u041f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u044f \u0446\u0435\u043b\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, Nobelium (\u0438\u043b\u0438 \u043a\u0430\u043a \u0438\u0445 \u0435\u0449\u0435 \u0438\u043c\u0435\u043d\u0443\u044e\u0442 APT29, UNC2452, SolarStorm, StellarParticle \u0438 Dark Halo) \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b.\n\n\u0418\u043c\u0435\u043d\u043d\u043e \u043e\u043d\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0441\u0441\u044b\u043b\u043a\u0430\u043c\u0438, \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043e\u0431\u0440\u0430\u0437\u0430 ICA-declass.iso \u0434\u043b\u044f \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430 Cobalt Strike Beacon, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0433\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 NativeZone (\u00abDocuments.dll\u00bb). \u042d\u0442\u043e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0431\u043e\u043a\u043e\u0432\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c iOS, \u0436\u0435\u0440\u0442\u0432\u0430 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0430\u0441\u044c \u043d\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f \u0442\u043e\u0433\u0434\u0430 \u0435\u0449\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\u00a0CVE-2021-1879. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e\u043c, \u0447\u0442\u043e\u00a0Apple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a 26 \u043c\u0430\u0440\u0442\u0430, \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0438, \u0447\u0442\u043e \u00ab\u044d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430\u00bb.\n\nVolexity \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 MSTIC \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 (\u041d\u041f\u041e), \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u044b, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u0428\u0410 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435, \u0432\u0441\u0435 \u0436\u0435 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0451\u0442\u0443, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u0438\u0440\u0442\u0443\u043e\u0437\u043d\u043e\u0441\u0442\u044c \u0438 \u043b\u0430\u0442\u0435\u043d\u0442\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0431\u043e\u0440\u043e\u043c Nobelium \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b\u00a0\u0438 \u0441\u0445\u0435\u043c\u044b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0441\u0432\u043e\u0435\u0439 \u0446\u0435\u043b\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Sliver \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0440\u0435\u0430\u043a\u0446\u0438\u044e \u0441\u043f\u0435\u0446\u043e\u0432 \u0438\u0437\u00a0Microsoft \u0438\u00a0Volexity, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IoC) \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u043c\u0435\u0442\u044c \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0435 \u043a\u043e\u043d\u0442\u0443\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e, \u0441\u0442\u0430\u043d\u0443\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u0442\u0435\u043c\u043e\u0439 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u041f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0421\u0428\u0410 \u0438 \u0420\u043e\u0441\u0441\u0438\u0438 \u0432 \u0416\u0435\u043d\u0435\u0432\u0435. \n\n\u0410 \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u0414\u0436\u043e \u0411\u0430\u0439\u0434\u0435\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u043e \u043c\u043e\u0449\u043d\u043e\u0435  \u00ab\u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435\u00bb \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u043c\u0431\u0438\u0446\u0438\u043e\u0437\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.", "creation_timestamp": "2021-05-28T17:26:54.000000Z"}, {"uuid": "d49c610c-3063-4f5f-a54c-e7bb0776741b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/NeKaspersky/662", "content": "Breaking news \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iOS\n\nApple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 iOS 14.4.2 \u0438 iPadOS 14.4.2. \u0421\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-1879. \n\n\u041d\u0430\u0448\u0435 \u043b\u044e\u0431\u0438\u043c\u043e\u0435: \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 WebKit. \u041d\u0430\u0432\u0435\u0440\u043d\u043e\u0435, \u0448\u0435\u0441\u0442\u0430\u044f \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 2020. \u0415\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google Threat Analysis Group. 0-day \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433 (XSS). \n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u043c \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.", "creation_timestamp": "2021-03-29T12:28:19.000000Z"}, {"uuid": "8e79de2d-def3-40d6-9881-6552c7e389a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/thehackernews/1115", "content": "\ud83d\udd25 Apple yesterday released an URGENT PATCH UPDATE for all of its devices running iOS, iPadOS, macOS, and watchOS to fix another WebKit zero-day vulnerability (CVE-2021-1879) that is being exploited in the wild.\n\nDetails: https://thehackernews.com/2021/03/apple-issues-urgent-patch-update-for.html", "creation_timestamp": "2021-03-27T07:09:23.000000Z"}, {"uuid": "27509086-adbb-4f99-b8e7-dcaa40a74f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3843", "content": "#exploit\nCVE-2021-1879:\nUse-After-Free in QuickTimePluginReplacement\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1879.html", "creation_timestamp": "2021-07-15T12:00:01.000000Z"}, {"uuid": "8d68df3a-71c9-4523-9f07-ad72e94138b1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/06b7a30a-7704-499c-bd52-c3ed5f3a58b7", "content": "", "creation_timestamp": "2026-06-19T12:47:56.136526Z"}, {"uuid": "95297b83-6cbd-4820-8f81-07cd9e01d486", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7e4eda3b-2425-4c18-9524-167b3f15072a", "content": "", "creation_timestamp": "2026-06-23T14:04:47.410943Z"}, {"uuid": "2cd7ead6-12da-4e4d-b930-c1c4648fa598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "https://t.me/cissp/3789", "content": "Threat Research\nCVE-2021-22555 - heap out-of-bounds write vulnerability in Linux Netfilter\nhttps://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html\n]-> PoC Exploit:\nhttps://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555\n\nRed Team Tactics\n1. Tool for taking over Active Directory user/computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding \"Shadow Credentials\" to the target account\ud83d\udc4d\ud83c\udffd\nhttps://github.com/eladshamir/Whisker\n2. Discovering an Authentication Bypass with r2 and Frida\nhttps://bananamafia.dev/post/satisfyer\n\n Malware analysis\n1. LuminousMoth APT:\nSweeping attacks for the chosen few\nhttps://securelist.com/apt-luminousmoth/103332\n2. Joker Android Fleezware\nhttps://blog.zimperium.com/joker-is-still-no-laughing-matter\n#exploit\nCVE-2021-1879:\nUse-After-Free in QuickTimePluginReplacement\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1879.html", "creation_timestamp": "2026-09-01T17:00:46.212755Z"}, {"uuid": "f33a93c9-39cb-42ad-ae99-dd0fbbc0d421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "https://t.me/hacking_Attack/27311", "content": "Black Hat Ethical Hacking\nEmergency Apple iOS 15.0.2 update fixes zero-day used in attacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156 \nReading Time: 1 Minute\nApple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.\nThis vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer\u00a0allowing an application to execute commands on vulnerable devices with kernel privileges.\n\nAs kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.\n\nWhile Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said in a security advisory\u00a0published earlier today.\nSee Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.\n\nHowever, soon after the vulnerability was released, security researcher Saar Amar\u00a0published a technical writeup and proof-of-concept exploit\u00a0that was derived from reverse engineering the patch.\n\nThe list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).\n\nWhile it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.\nSee Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today\u2019s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:\n\n* two zero-days earlier this month, one of them\u00a0used also used to install Pegasus spyware on iPhones,\n* the FORCEDENTRY\u00a0exploit\u00a0disclosed in August (previously tracked by\u00a0Amnesty Tech as Megalodon),\n* three iOS zero-days\u00a0(CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous\u00a0researchers,\n* an iOS zero-day\u00a0(CVE-2021-1879) in March that may have also been actively exploited,\n* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657)\u00a0in April, exploited by Shlayer malware,\n* three other iOS zero-days\u00a0(CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,\n* a macOS zero-day (CVE-2021-30713)\u00a0in May, which was abused by the XCSSET malware to bypass Apple\u2019s TCC privacy protection,\n* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762)\u00a0in June that \u201cmay have been actively exploited\u201d to hack into older iPhone, iPad, and iPod devices.\nSee Also: Offensive Security Tool: Whispers\nLast month, a researcher publicly disclosed exploits for three zero-day vulnerabilities\u00a0after Apple delayed patching and failed to credit the person who reported them.\nSee Also: Hacking stories \u2013 Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:14.907765Z"}, {"uuid": "de632adb-df94-4012-95d0-8f9c3d823df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "https://t.me/hacking_Attack/27311", "content": "Black Hat Ethical Hacking\nEmergency Apple iOS 15.0.2 update fixes zero-day used in attacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156 \nReading Time: 1 Minute\nApple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.\nThis vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer\u00a0allowing an application to execute commands on vulnerable devices with kernel privileges.\n\nAs kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.\n\nWhile Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said in a security advisory\u00a0published earlier today.\nSee Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.\n\nHowever, soon after the vulnerability was released, security researcher Saar Amar\u00a0published a technical writeup and proof-of-concept exploit\u00a0that was derived from reverse engineering the patch.\n\nThe list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).\n\nWhile it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.\nSee Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today\u2019s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:\n\n* two zero-days earlier this month, one of them\u00a0used also used to install Pegasus spyware on iPhones,\n* the FORCEDENTRY\u00a0exploit\u00a0disclosed in August (previously tracked by\u00a0Amnesty Tech as Megalodon),\n* three iOS zero-days\u00a0(CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous\u00a0researchers,\n* an iOS zero-day\u00a0(CVE-2021-1879) in March that may have also been actively exploited,\n* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657)\u00a0in April, exploited by Shlayer malware,\n* three other iOS zero-days\u00a0(CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,\n* a macOS zero-day (CVE-2021-30713)\u00a0in May, which was abused by the XCSSET malware to bypass Apple\u2019s TCC privacy protection,\n* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762)\u00a0in June that \u201cmay have been actively exploited\u201d to hack into older iPhone, iPad, and iPod devices.\nSee Also: Offensive Security Tool: Whispers\nLast month, a researcher publicly disclosed exploits for three zero-day vulnerabilities\u00a0after Apple delayed patching and failed to credit the person who reported them.\nSee Also: Hacking stories \u2013 Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:42.070650Z"}, {"uuid": "7dd312cd-a856-4b65-bcdd-3256b76a72ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "seen", "source": "https://t.me/cissp/3789", "content": "Threat Research\nCVE-2021-22555 - heap out-of-bounds write vulnerability in Linux Netfilter\nhttps://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html\n]-> PoC Exploit:\nhttps://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555\n\nRed Team Tactics\n1. Tool for taking over Active Directory user/computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding \"Shadow Credentials\" to the target account\ud83d\udc4d\ud83c\udffd\nhttps://github.com/eladshamir/Whisker\n2. Discovering an Authentication Bypass with r2 and Frida\nhttps://bananamafia.dev/post/satisfyer\n\n Malware analysis\n1. LuminousMoth APT:\nSweeping attacks for the chosen few\nhttps://securelist.com/apt-luminousmoth/103332\n2. Joker Android Fleezware\nhttps://blog.zimperium.com/joker-is-still-no-laughing-matter\n#exploit\nCVE-2021-1879:\nUse-After-Free in QuickTimePluginReplacement\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1879.html", "creation_timestamp": "2026-09-02T01:04:33.489976Z"}, {"uuid": "91029e90-213d-4729-b3f1-d1335c26485e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/hacking_Attack/27311", "content": "Black Hat Ethical Hacking\nEmergency Apple iOS 15.0.2 update fixes zero-day used in attacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156 \nReading Time: 1 Minute\nApple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.\nThis vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer\u00a0allowing an application to execute commands on vulnerable devices with kernel privileges.\n\nAs kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.\n\nWhile Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said in a security advisory\u00a0published earlier today.\nSee Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.\n\nHowever, soon after the vulnerability was released, security researcher Saar Amar\u00a0published a technical writeup and proof-of-concept exploit\u00a0that was derived from reverse engineering the patch.\n\nThe list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).\n\nWhile it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.\nSee Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today\u2019s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:\n\n* two zero-days earlier this month, one of them\u00a0used also used to install Pegasus spyware on iPhones,\n* the FORCEDENTRY\u00a0exploit\u00a0disclosed in August (previously tracked by\u00a0Amnesty Tech as Megalodon),\n* three iOS zero-days\u00a0(CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous\u00a0researchers,\n* an iOS zero-day\u00a0(CVE-2021-1879) in March that may have also been actively exploited,\n* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657)\u00a0in April, exploited by Shlayer malware,\n* three other iOS zero-days\u00a0(CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,\n* a macOS zero-day (CVE-2021-30713)\u00a0in May, which was abused by the XCSSET malware to bypass Apple\u2019s TCC privacy protection,\n* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762)\u00a0in June that \u201cmay have been actively exploited\u201d to hack into older iPhone, iPad, and iPod devices.\nSee Also: Offensive Security Tool: Whispers\nLast month, a researcher publicly disclosed exploits for three zero-day vulnerabilities\u00a0after Apple delayed patching and failed to credit the person who reported them.\nSee Also: Hacking stories \u2013 Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T08:00:06.380634Z"}, {"uuid": "e4b3a3a0-0fea-4b65-9c33-d423aaa35a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "exploited", "source": "https://t.me/hacking_Attack/27311", "content": "Black Hat Ethical Hacking\nEmergency Apple iOS 15.0.2 update fixes zero-day used in attacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156 \nReading Time: 1 Minute\nApple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.\nThis vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer\u00a0allowing an application to execute commands on vulnerable devices with kernel privileges.\n\nAs kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.\n\nWhile Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said in a security advisory\u00a0published earlier today.\nSee Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.\n\nHowever, soon after the vulnerability was released, security researcher Saar Amar\u00a0published a technical writeup and proof-of-concept exploit\u00a0that was derived from reverse engineering the patch.\n\nThe list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).\n\nWhile it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.\nSee Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today\u2019s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:\n\n* two zero-days earlier this month, one of them\u00a0used also used to install Pegasus spyware on iPhones,\n* the FORCEDENTRY\u00a0exploit\u00a0disclosed in August (previously tracked by\u00a0Amnesty Tech as Megalodon),\n* three iOS zero-days\u00a0(CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous\u00a0researchers,\n* an iOS zero-day\u00a0(CVE-2021-1879) in March that may have also been actively exploited,\n* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657)\u00a0in April, exploited by Shlayer malware,\n* three other iOS zero-days\u00a0(CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,\n* a macOS zero-day (CVE-2021-30713)\u00a0in May, which was abused by the XCSSET malware to bypass Apple\u2019s TCC privacy protection,\n* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762)\u00a0in June that \u201cmay have been actively exploited\u201d to hack into older iPhone, iPad, and iPod devices.\nSee Also: Offensive Security Tool: Whispers\nLast month, a researcher publicly disclosed exploits for three zero-day vulnerabilities\u00a0after Apple delayed patching and failed to credit the person who reported them.\nSee Also: Hacking stories \u2013 Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:52.859918Z"}, {"uuid": "1b044598-8e2e-4a77-a208-188a2d43dce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3789", "content": "Threat Research\nCVE-2021-22555 - heap out-of-bounds write vulnerability in Linux Netfilter\nhttps://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html\n]-> PoC Exploit:\nhttps://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555\n\nRed Team Tactics\n1. Tool for taking over Active Directory user/computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding \"Shadow Credentials\" to the target account\ud83d\udc4d\ud83c\udffd\nhttps://github.com/eladshamir/Whisker\n2. Discovering an Authentication Bypass with r2 and Frida\nhttps://bananamafia.dev/post/satisfyer\n\n Malware analysis\n1. LuminousMoth APT:\nSweeping attacks for the chosen few\nhttps://securelist.com/apt-luminousmoth/103332\n2. Joker Android Fleezware\nhttps://blog.zimperium.com/joker-is-still-no-laughing-matter\n#exploit\nCVE-2021-1879:\nUse-After-Free in QuickTimePluginReplacement\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1879.html", "creation_timestamp": "2026-09-11T01:00:04.534926Z"}, {"uuid": "2d48720d-456a-4c7a-93e5-ed4a9869cb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1879", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3789", "content": "Threat Research\nCVE-2021-22555 - heap out-of-bounds write vulnerability in Linux Netfilter\nhttps://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html\n]-> PoC Exploit:\nhttps://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555\n\nRed Team Tactics\n1. Tool for taking over Active Directory user/computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding \"Shadow Credentials\" to the target account\ud83d\udc4d\ud83c\udffd\nhttps://github.com/eladshamir/Whisker\n2. Discovering an Authentication Bypass with r2 and Frida\nhttps://bananamafia.dev/post/satisfyer\n\n Malware analysis\n1. LuminousMoth APT:\nSweeping attacks for the chosen few\nhttps://securelist.com/apt-luminousmoth/103332\n2. Joker Android Fleezware\nhttps://blog.zimperium.com/joker-is-still-no-laughing-matter\n#exploit\nCVE-2021-1879:\nUse-After-Free in QuickTimePluginReplacement\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1879.html", "creation_timestamp": "2026-09-12T00:00:57.267496Z"}]}