Apple gave credit for the discovery of the vulnerability to Eyre Hernandez and Clément Lecigne of the Google Threat Analysis Group and Ian Beer of Google Project Zero.
The XNU vulnerability affects macOS as well as iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3 and iPod touch.Īpple describes the vulnerability as allowing a malicious application to execute arbitrary code with kernel privileges and notes that an exploit for the issue exists in the wild. The updates, iOS 12.5.5, for older models that can’t run iOS 15, and Security Update 2021-006 Catalina, both address the vulnerability known as CVE-2021-30869. today released updates for iOS and macOS that address several vulnerabilities currently being exploited in the wild.