iPhone security alert: Update to iOS 14.4 right now

iOS 14.4
(Image credit: Future)

Apple's iOS 14.4 and iPadOS 14.4 were both released today (Jan. 26), and if you've got an Apple device running either iOS 14 or iPadOS 14, you'd better update to them. They patch three security flaws that may be actively and currently exploited by attackers unknown.

The Apple security bulletin says the updates fix a kernel flaw, designated CVE-2021-1782, and two flaws in the WebKit browser-rendering engine underpinning Safari, CVE-2021-1870 and CVE-2021-1871. 

In each case, Apple says it is "aware of a report that this issue may have been actively exploited" and credits the discovery of the flaw to "an anonymous researcher."

The kernel flaw is the result of a race condition, in which a malicious command tries to beat an authorized command to the next step in a process, that permits elevation of privileges — in other words, giving an app more powers over the OS than it's meant to have. 

The WebKit bugs are the result of "a logic issue," which could mean almost anything, and permit "arbitrary code execution" — running malware — by a "remote attacker" over the internet.

So far, that's about all we know. The Common Vulnerabilities and Exposures (CVE) listings for those bugs reveal nothing. We don't know who found them, who's using them, how they attack iPhones or what they do when they succeed. Apple promises "additional details available soon."

If it's any comfort, most iOS security flaws that were revealed to have been exploited "in the wild" over the past few years have been used only in targeted attacks against specific persons or groups. 

That's no help if you're famous, work in the defense or media industries or are a political dissident in a repressive country, so patch those phones and iPads.

TOPICS
Paul Wagenseil

Paul Wagenseil is a senior editor at Tom's Guide focused on security and privacy. He has also been a dishwasher, fry cook, long-haul driver, code monkey and video editor. He's been rooting around in the information-security space for more than 15 years at FoxNews.com, SecurityNewsDaily, TechNewsDaily and Tom's Guide, has presented talks at the ShmooCon, DerbyCon and BSides Las Vegas hacker conferences, shown up in random TV news spots and even moderated a panel discussion at the CEDIA home-technology conference. You can follow his rants on Twitter at @snd_wagenseil.

Read more
Apple iPhone 16 held in the hand.
iOS 18.3.1 — update your iPhone right now to fix critical zero-day vulnerability
iPhone 16 Pro shown held in hand
Apple just patched its first zero-day flaw of the year — update your iPhone and Mac right now
Apple iPhone 16 Plus Review.
Apple just released an emergency security update for a flaw used in an ‘extremely sophisticated attack’ — update your devices right now
Google Pixel 9 held in the hand.
Google just fixed a zero-day kernel flaw used by hackers and 47 other vulnerabilities — update your Android phone right now
MacBook Pro 16-inch 2021 sitting on a patio table
Critical macOS flaw puts your data and cameras at risk — update right now
Windows
240 million Windows 10 users are vulnerable to six different hacker exploits — protect yourself now
Latest in iPhones
iPhone 17 Air render
iPhone 17 Air — new survey could be bad news for Apple's super thin iPhone
Render of the alleged design of the iPhone 17 Pro
New iPhone 17 Pro dummy leak highlights redesigned camera and part glass body
Siri in iOS 18 on iPhone
Users complain that Siri can’t answer even the most basic questions — here’s what we know
iPhone 16 next to samsung galaxy watch 7 and bose wireless earbuds on a composite image
Apple's walled garden is crumbling — EU orders iOS to open up to third-party devices
Apple iPhone 16 & 16 Plus hands-on.
Forget USB-C — a truly portless iPhone just got the all-clear from the EU
iPhone Flip render
iPhone Flip could solve one of the biggest problems with foldable phones — here's how
Latest in News
Rendered images of rumored foldable iPhone.
Foldable iPhone report just revealed key details — here's what we know
NYTimes Connections
NYT Connections today hints and answers — Saturday, March 23 (#651)
NYT Strands on a cellphone
NYT Strands today — hints, spangram and answers for game #385 (Sunday, March 23 2025)
Nintendo Switch 2
Nintendo Switch 2 rumored specs — here’s what we know so far
iPhone 17 Pro render
iPhone 17 Pro — 7 biggest rumored upgrades
CAD renderings of the Google Pixel 10 Pro XL
Pixel 10 leak could be good news for all Android phones