Security Advisory 2021-059

History:

• 29/10/2021 --- v1.0 -- Initial publication

Summary

On October 25, Apple released multiple security updates fixing vulnerabilities on various Apple Operating Systems including macOS and iOS[1]. These security updates address several vulnerabilities in Apple products, some of which could be exploited by an attacker to elevate privileges, execute arbitrary code with kernel privileges, or gain control access on the vulnerable products.

Affected Products

The following products are affected [2]:

• Version before macOS Monterey 12.0.1 [3]
• Version before macOS Big Sur 11.6.1 [4]
• Catalina without Security Update 2021-007 [5]
• Version before iOS 15.1 and iPadOS 15.1 [6]
• Version before iOS 14.8.1 and iPadOS 14.8.1 [7]

Recommendations

CERT-EU highly recommends applying the security updates for each Apple Operating System.

References

[1] https://us-cert.cisa.gov/ncas/current-activity/2021/10/27/apple-releases-security-updates-multiple-products

[2] https://support.apple.com/en-gb/HT201222

[3] https://support.apple.com/en-gb/HT212869

[4] https://support.apple.com/en-gb/HT212872

[5] https://support.apple.com/en-gb/HT212871

[6] https://support.apple.com/en-gb/HT212867

[7] https://support.apple.com/en-gb/HT212868