{"uuid": "80f48aff-6b24-4168-a984-41483de29353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-30858", "type": "exploited", "source": "https://t.me/cKure/7082", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Apple fixes \u201czero-click\u201d iMessage zero-day exploited to deliver spyware (CVE-2021-30860).\n\nApple has released security updates for macOS, iOS, iPadOS, watchOS and Safari that patch two vulnerabilities (CVE-2021-30860, CVE-2021-30858) that are being exploited in attacks in the wild. About the vulnerabilities (CVE-2021-30860, CVE-2021-30858) Active exploitation of CVE-2021-30860, a integer overflow bug that could be exploited via a maliciously crafted PDF to achieve execution of malicious code on vulnerable devices, was flagged by researchers with The Citizen Lab.\n\nhttps://www.helpnetsecurity.com/2021/09/14/cve-2021-30860/", "creation_timestamp": "2021-09-14T16:22:18.000000Z"}