Description:
Apple has released iOS 14.4.1 and iPadOS 14.4.1 to fix a vulnerability in various Apple devices. The vulnerability could be exploited by enticing a user to open a specially crafted website.
Affected Systems:
- iPhone 6s and later
- iPad Air 2 and later, mini 4 and later
- iPod touch (7th generation)
Impact:
A successful exploitation could lead to arbitrary code execution on an affected device.
Recommendation:
Apple has released new version of iOS and iPadOS to address the issue.
The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
More Information:
- https://support.apple.com/zh-hk/HT212221
- https://www.hkcert.org/security-bulletin/apple-products-remote-code-execution-vulnerability_20210309
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1844
