CVE-2021-30761 — Apple iOS WebKit Memory Corruption Vulnerability

provenance: imported · CVE: CVE-2021-30761

CVE-2021-30761: Apple iOS WebKit Memory Corruption Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apple
Product	iOS
Date added	2021-11-03
Due date	2021-11-17
Ransomware campaign use	Unknown

Description

Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-30761

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-30761
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog