iPhones, iPads under active attack; users urged to patch immediately

Published 10/20/21, 9:00am

Apple has released iOS 15.0.2 and iPadOS 15.0.2 to correct a zero-day vulnerability currently under active exploit. Tracked as CVE-2021-30883, the bug is a critical memory corruption issue that enables a malicious application to execute arbitrary code with kernel privileges. 

Apple has not disclosed details on how the attack is being used. Apple products affected include the iPhone 6s and later, all models of the iPad Pro, the iPad Air 2 and later, the iPad 5^th generation and later, the iPad mini 4 and later, and the 7^th generation iPod Touch. 

Next Steps

Apple product users are reminded that iOS devices are not impervious to attacks. Apple is urging users to update all affected devices as soon as possible due to the severity of the vulnerability. Additional information on the Apple vulnerability and update can be found in the security advisory.