CVE-2021-30762 — Apple iOS WebKit Use-After-Free Vulnerability

provenance: imported · CVE: CVE-2021-30762

CVE-2021-30762: Apple iOS WebKit Use-After-Free Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apple
Product	iOS
Date added	2021-11-03
Due date	2021-11-17
Ransomware campaign use	Unknown

Description

Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-30762

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-30762
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog