Alert GCSA-21116 - Vulnerabilita' nei prodotti Apple (APPLE-SA-2021-10-26)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
******************************************************************
Alert ID: GCSA-21116
Data: 27 Ottobre 2021
Titolo: Vulnerabilita' nei prodotti Apple (APPLE-SA-2021-10-26)
******************************************************************
:: Descrizione del problema
Sono state identificate vulnerabilita' multiple nei prodotti Apple che
potrebbero
essere sfruttate da un attaccanti locali e remoti.
Maggiori informazioni sono disponibili nelle segnalazioni
ufficiali alla sezione "Riferimenti".
:: Software interessato
versioni precedenti a:
iOS 14.8.1
iOS 15.1
iPadOS 14.8.1
iPadOS 15.1
tvOS 15.1
watchOS 8.1
macOS Catalina Security Update 2021-007
macOS Big Sur 11.6.1
:: Impatto
Esecuzione remota di codice arbitrario
Acquisizione di privilegi piu' elevati
Elusione delle restrizioni di sicurezza
Accesso a informazioni riservate e/o sensibili
Cross-Site Scripting
:: Soluzione
Aggiornare i software alle ultime versioni
iOS 14.8.1
iOS 15.1
iPadOS 14.8.1
iPadOS 15.1
tvOS 15.1
watchOS 8.1
macOS Catalina Security Update 2021-007
macOS Big Sur 11.6.1
:: Riferimenti
Apple
https://support.apple.com/en-us/HT212867
https://support.apple.com/en-us/HT212868
https://support.apple.com/en-us/HT212871
https://support.apple.com/en-us/HT212872
https://support.apple.com/en-us/HT212874
https://support.apple.com/en-us/HT212876
Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30813
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30821
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30823
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30824
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30834
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30861
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30864
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30868
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30873
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30875
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30876
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30877
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30879
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30881
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30883
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30886
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30887
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30888
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30889
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30890
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30892
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30894
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30895
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30896
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30899
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30900
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30901
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30902
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30903
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30905
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30906
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30907
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30908
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30909
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30910
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30911
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30912
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30913
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30914
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30915
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30916
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30917
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30918
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30919
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30920
GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iD8DBQFheQP/wZxMk2USYEIRAtQ0AJ4rSXon0sdUUWhMdgojq8Oivt6a5QCdEKjh
Uda0ss/PepDQvEUC8bOAW10=
=GF05
-----END PGP SIGNATURE-----