CyberSec.Space Logo
返回 CVE 浏览器

CVE-2021-30858

Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score25.4860%
EPSS Percentile87.99th
Published2021年8月24日
Last Modified2025年10月27日

Vulnerability Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected Platforms (CPE)

💻
Apple

Ipados

>= 13.1 and < 14.8
💻
Apple

Iphone Os

< 12.5.5
💻
Apple

Iphone Os

>= 13.0 and < 14.8
💻
Apple

Macos

< 11.6
💻
Fedoraproject

Fedora

= 33
💻
Fedoraproject

Fedora

= 34
💻
Debian

Debian Linux

= 10.0
💻
Debian

Debian Linux

= 11.0

References & Advisories

🔗 http://seclists.org/fulldisclosure/2021/Sep/25
🔗 http://seclists.org/fulldisclosure/2021/Sep/27
🔗 http://seclists.org/fulldisclosure/2021/Sep/29
🔗 http://seclists.org/fulldisclosure/2021/Sep/38
🔗 http://seclists.org/fulldisclosure/2021/Sep/39
🔗 http://seclists.org/fulldisclosure/2021/Sep/50
🔗 http://www.openwall.com/lists/oss-security/2021/09/20/1
🔗 http://www.openwall.com/lists/oss-security/2021/10/26/9

相关漏洞威胁

CVE-2019-877910.0

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions...

CVE-2020-39109.8

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39099.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39119.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....