Apple has released security updates to fix vulnerabilities in iOS 14.8, macOS Big Sur 11.6, Safari 14.1.2, watchOS 7.6.2, and other products. The tech giant also warned of active exploits in the wild against some vulnerabilities.
A hacker could exploit some of these vulnerabilities to take control of affected devices.
iOS 14.8 and iPadOS 14.8
The latest iOS 14.8 and iPadOS 14.8 security update released on September 13 addressed 2 vulnerabilities that could result in arbitrary code execution.
The Apple update addressed a CoreGraphics vulnerability CVE-2021-30860 and a WebKit vulnerability CVE-2021-30858.
Apple warned that each of the issues “may have been actively exploited.”
The update is available for iPhone 6s and later, and iPod touch (7th generation).
Apple also released iPadOS 14.8 for iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, and iPad mini 4 and later, and iPod touch (7th generation).
macOS updates
In addition, Apple released macOS Big Sur 11.6 security update on September 13 that addressed the same actively exploited vulnerabilities as in iOS (CVE-2021-30860 and CVE-2021-30858).
Apple also issued macOS Security Update 2021-005 Catalina with a fix for CVE-2021-30860.
Safari 14.1.2
Moreover, the Apple Safari 14.1.2 security update fixed CVE-2021-30858 exploited in the wild.
The update is available for systems running macOS Catalina and macOS Mojave.
watchOS 7.6.2
The latest Apple Watch 7.6.2 security update addressed a single WebKit vulnerability CVE-2021-30860 also exploited in the wild.
iCloud for Windows 12.5
Finally, Apple released iCloud for Windows 12.5 security update, which included patches for 2 ImageIO vulnerabilities.
Readers can check out the latest Apple security updates page for more details.