Update your iPhone and other Apple devices right now to stay safe
Apple has released a new software update for iPhone users in the form of iOS 14.2 along with updates for Apple Watch, iPad and Macs. Apart from the new software features and improvement, Apple has fixed three zero-day vulnerabilities. These vulnerabilities were discovered and reported to Apple by Google’s Project Zero security team.
All iPhone models after iPhone 5s are affected by these vulnerabilities along with iPod 6th-gen and later, iPad Air, iPad Mini 2 and later and all Apple Watch models. To fix the issue update your new iPhone to iOS 14.2. If you are using an old iPhone then update to iOS 12.4.9. Other updates that take care of these zero-day vulnerabilities are iPadOS 14.2, watchOS 5.3.9, watchOS 6.2.9, and watchOS 7.1 and macOS Catalina 10.15.7. Make sure your Apple devices are running these latest software versions.
The three zero-day vulnerabilities are identified as CVE-2020-27930: a memory corruption issue in the FontParser library. This allows an attacker to execute codes remotely through a malicious font. The second one is marked as CVE-2020-27950 which allows a malware to disclose kernel memory and the last zero-day vulnerability is identified as CVE-2020-27932 which is a memory initialisation issue through which an attacker can execute arbitrary code with kernel privileges through a malware.