Apple iOS/iPadOS 14.8.1 Security Update: Kernel Privilege Escalation & RCE Vulnerabilities (CVE-2021-30883, CVE-2021-30900, etc.)

从该网页截图中获取到的关键漏洞信息如下： 系统版本：iOS 14.8.1 and iPadOS 14.8.1 发布日期：October 26, 2021 漏洞信息概述： 1. Audio - 影响：A malicious application may be able to elevate privileges. - CVE：CVE-2021-30907: Zweig of Kunlun Lab 2. ColorSync - 影响：Processing a maliciously crafted image may lead to arbitrary code execution. - CVE：CVE-2021-30926: Jeremy Brown 3. Continuity Camera - 影响：A local attacker may be able to cause unexpected application termination or arbitrary code execution. - CVE：CVE-2021-30903: Gongyu Ma of Hangzhou Dianzi University 4. CoreGraphics - 影响：Processing a maliciously crafted PDF may lead to arbitrary code execution. - CVE：CVE-2021-30919 5. GPU Drivers - 影响：A malicious application may be able to execute arbitrary code with kernel privileges. - CVE：CVE-2021-30900: Yinyi Wu (@3ndy1) of Ant Security Light-Year Lab 6. IOMobileFrameBuffer - 影响：An application may be able to execute arbitrary code with kernel privileges. Note: Apple is aware of a report that this issue may have been actively exploited. - CVE：CVE-2021-30883: an anonymous researcher 7. Kernel (2 instances mentioned) - 影响：An application may be able to execute arbitrary code with kernel privileges. - CVEs：CVE-2021-30909, CVE-2021-30916 (both by Zweig of Kunlun Lab) 8. Sidecar, Status Bar, Voice Control - All have similar descriptions involving local attacker impacts resulting in unexpected app termination or arbitrary code execution. - CVEs：CVE-2021-30903 (Sidecar), CVE-2021-30918 (Status Bar), and CVE-2021-30902 (Voice Control) 9. WebKit - 影响：A malicious website using Content Security Policy reports may be able to leak information via redirect behavior. - CVE：CVE-2021-30888: Prakash (@1lastBr3ath) 每个条目都针对特定的系统功能或服务进行了安全修补，强调了这类漏洞可能带来的风险，如任意代码执行和权限提升等问题。

目標達成 すべての支援者に感謝 — 100%達成しました！

Apple iOS/iPadOS 14.8.1 Security Update: Kernel Privilege Escalation & RCE Vulnerabilities (CVE-2021-30883, CVE-2021-30900, etc.)

目標達成すべての支援者に感謝 — 100%達成しました！