Security Alert (A20-07-07): Multiple Vulnerabilities in Apple iOS and iPadOS

Description:

Apple has released iOS 13.6 and iPadOS 13.6 to fix multiple vulnerabilities in various Apple devices. The list of vulnerability information can be found at:

https://support.apple.com/en-us/HT211288

Affected Systems:

• iPhone 6s and later
• iPad Air 2 and later, mini 4 and later
• iPod touch (7th generation)

Impact:

A successful attack could lead to arbitrary code execution, denial of service, information disclosure, and security restriction bypass.

Recommendation:

Apple has released new version of iOS and iPadOS to address the issue.

The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

https://support.apple.com/en-us/HT211288
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14899
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19906
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9862
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9865
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9878
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9885
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9888 (to CVE-2020-9891)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9893 (to CVE-2020-9895)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9903
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9907
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9909 (to CVE-2020-9911)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9914 (to CVE-2020-9918)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9923
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9925
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9931
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9933
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9934
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9936