A new actively exploited vulnerability has been discovered that can be used against a number of services, including Apple’s iCloud, Valve’s Steam, Microsoft’s Minecraft, and more.
The vulnerability, CVE-2021-44228, exists in the widely used Java library Apache Log4j. It’s classified as a severe zero-day flaw and, if exploited, could allow attackers to perform remote code execution and grant control over affected servers.
According to users on the programming subreddit, many companies are scrambling to patch the vulnerability. AppleInsider has confirmed through sources not authorized to speak on the matter that efforts are being made across the industry to either assess the impact, or actively apply patches.
Read more at AppleInsider.com