CVE-2021-30858 — Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

provenance: imported · CVE: CVE-2021-30858

CVE-2021-30858: Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apple
Product	iOS, iPadOS, and macOS
Date added	2021-11-03
Due date	2021-11-17
Ransomware campaign use	Unknown

Description

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-30858

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-30858
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog