CVE-2021-30666 — Apple iOS WebKit Buffer Overflow Vulnerability

provenance: imported · CVE: CVE-2021-30666

CVE-2021-30666: Apple iOS WebKit Buffer Overflow Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apple
Product	iOS
Date added	2021-11-03
Due date	2021-11-17
Ransomware campaign use	Unknown

Description

Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-30666

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-30666
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog