iOS 14.4.2/watchOS 7.3.3 - iOS

https://flip.it/C9JZeH

這是zero day flow, 表示漏洞已經被發現正在被利用

The flaw lets a malicious website or web page spark "universal cross-site scri
pting" in WebKit, says Apple.

一個網頁的程式碼可以在另外一個網站執行

That would be very bad indeed, as it means that ne'er-do-wells can embed code
in websites that can redirect you to malicious websites or even steal informat
ion, such as passwords or credit-card numbers, from your browser.

這表示一個看起來正常的網站可以強迫妳轉到壞的網站再對你做壞壞的事，比如說偷信用
卡資料

Apple said this new issue "was addressed by improved management of object life
times," although we really can only guess at what that means.

蘋果說這個問題目前以更好的物件壽命管理來解決，雖然不知道這什麼意思

Credit for finding the flaw was given to Cl幦ent Lecigne and Billy Leonard, bo
th researchers in Google's Threat Analysis Group.

感謝google 幫忙找到漏洞

大家趕快更新吧～
雖然覺得好像沒有完全解決

--