Lucene search

K
cvelistAppleCVELIST:CVE-2021-30858
HistoryAug 24, 2021 - 6:49 p.m.

CVE-2021-30858

2021-08-2418:49:23
apple
www.cve.org
5
use after free
memory management
ios 14.8
ipados 14.8
macos big sur 11.6
arbitrary code execution
exploited

AI Score

8.8

Confidence

High

EPSS

0.007

Percentile

80.8%

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CNA Affected

[
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "11.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "iOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "14.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References