A new jailbreak tool Unc0ver works on almost every iPhone, including the iPhone 12. It is based on the same vulnerability that Apple said could have been actively exploited by hackers.
The approach works on iPhones running iOS 11 through iOS 14.3, as Apple fixed the flaws in iOS 14.4 …
TechCrunch reports:
In a tweet, the jailbreak group said it used its “own exploit” for CVE-2021-1782, a kernel vulnerability that Apple said was one of three flaws that “may have been actively exploited” by hackers. By targeting the kernel, hackers are able to obtain deep hooks in the underlying operating system […]
The group’s latest jailbreak, which supported iPhones running iOS 11 to iOS 13.5, was fixed in a matter of days last year. Apple works quickly to understand and fix the vulnerabilities found by jailbreak groups, since those same vulnerabilities can be exploited in a malicious manner.
Apple’s admission last month was unusual, but the company gave no indication of the scale or scope of any exploration.
In addition to the new features detailed previously, iOS 14.4 also brings a trio of notable security improvements. In a new support document published this afternoon, Apple said that iOS 14.4 addresses a kernel vulnerability and two WebKit vulnerabilities, all three “may have been actively exploited”.
Apple says iOS 14.4 addresses a kernel security vulnerability that affects iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later and iPod touch (7th generation). The company provides only a brief description of the details:
-
Impact: A malicious application may be able to elevate privileges. Apple is aware of a report that this problem may have been actively exploited.
-
Description: A race condition has been resolved with improved blocking.
Given the potential exploitation, however, this would make jailbreak risky, as it means staying on a version of iOS that is known to have been specifically targeted by hackers.
FTC: We use affiliate links for cars that generate revenue. Most.
Check out 9to5Mac on YouTube for more news from Apple: