Back to CVE Browser

CVE-2021-30666

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score94.4490%

EPSS Percentile96.79th

Published2021-09-08

Last Modified2025-10-23

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Affected Platforms (CPE)

💻

Apple

Iphone Os

< 12.5.3

References & Advisories

🔗 https://support.apple.com/en-us/HT212341

🔗 https://support.apple.com/en-us/HT212341

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30666

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 28, 2026

Today’s threat intelligence covers the Certighost CVE-2026-54121 AD CS domain-takeover chain, vBulletin CVE-2026-61511 pre-auth RCE, the expanding Dysphoria botnet, and the DentaQuest and Fairlife breach updates.

Daily Global Cyber Threat Intelligence Digest — July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

Related Vulnerabilities

CVE-2026-647324.6

This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker with phys...

CVE-2019-256456.2

WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the applic...

CVE-2025-500537.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nebelhorn Blappsta Mobile Ap...

CVE-2025-92007.5

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injectio...