Security Alert (A20-09-03): Multiple Vulnerabilities in Apple iOS and iPadOS

Description:

Apple has released iOS 14 and iPadOS 14 to fix multiple vulnerabilities in various Apple devices. The list of vulnerability information can be found at:

https://support.apple.com/zh-hk/HT211850

Affected Systems:

• iPhone 6s and later
• iPad Air 2 and later, mini 4 and later
• iPod touch (7th generation)

Impact:

A successful attack could lead to arbitrary code execution, cross site scripting, information disclosure, security restriction bypass or unexpected system termination.

Recommendation:

Apple has released new version of iOS and iPadOS to address the issue.

The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

https://support.apple.com/zh-hk/HT211850
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9773
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9946
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9952
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9958
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9959
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9964
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9968
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9973
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9979
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9992