{"id":43040,"date":"2021-09-24T05:01:08","date_gmt":"2021-09-24T05:01:08","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/apple-warns-of-arbitrary-code-execution-zero-day-being-actively-exploited-on-macs\/"},"modified":"2021-09-24T05:01:08","modified_gmt":"2021-09-24T05:01:08","slug":"apple-warns-of-arbitrary-code-execution-zero-day-being-actively-exploited-on-macs","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/apple-warns-of-arbitrary-code-execution-zero-day-being-actively-exploited-on-macs\/","title":{"rendered":"Apple warns of arbitrary code execution zero-day being actively exploited on Macs"},"content":{"rendered":"

Apple has warned iPhone and Mac users it’s aware of security bugs in its software that are being actively exploited.<\/p>\n

First off, the iGiant thanked Google for spotting CVE-2021-30869 in macOS Catalina. It’s a nasty flaw, as it’s in the XNU kernel at the heart of Apple’s operating systems including macOS and iOS.<\/p>\n

As Apple’s advisory<\/a> explains, “a malicious application may be able to execute arbitrary code with kernel privileges” by exploiting this security hole. Thus, malware running on a system can use the bug to take total control. The fruit-themed company says the flaw existed thanks to a “type confusion issue” that was sorted out “with improved state handling.”<\/p>\n