Back to CVE Browser

CVE-2021-30860

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score62.9780%

EPSS Percentile90.20th

Published2021-08-24

Last Modified2025-10-27

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected Platforms (CPE)

💻

Apple

Ipados

< 14.8

💻

Apple

Iphone Os

< 12.5.5>= 13.0 and < 14.8

💻

Apple

Mac Os X

>= 10.15 and < 10.15.7= 10.15.7

💻

Apple

Macos

< 11.6

References & Advisories

🔗 http://seclists.org/fulldisclosure/2021/Sep/25

🔗 http://seclists.org/fulldisclosure/2021/Sep/26

🔗 http://seclists.org/fulldisclosure/2021/Sep/27

🔗 http://seclists.org/fulldisclosure/2021/Sep/28

🔗 http://seclists.org/fulldisclosure/2021/Sep/38

🔗 http://seclists.org/fulldisclosure/2021/Sep/39

🔗 http://seclists.org/fulldisclosure/2021/Sep/40

🔗 http://seclists.org/fulldisclosure/2021/Sep/50

Related Vulnerabilities

CVE-2026-647838.8

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6...

CVE-2026-647759.8

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS ...

CVE-2026-647749.8

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 1...

CVE-2026-647729.8

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS ...