CVEvulnerability
CVE-2021-30734
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-09-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 14.1.1)
• apple ipados (< 14.6)
• apple iphone os (< 14.6)
• apple macos (>= 11.0.1 < 11.4)
• apple tvos (< 14.6)
• apple watchos (< 7.5)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/HT212528 Vendor Advisory
- https://support.apple.com/en-us/HT212529 Vendor Advisory
- https://support.apple.com/en-us/HT212532 Vendor Advisory
- https://support.apple.com/en-us/HT212533 Vendor Advisory
- https://support.apple.com/en-us/HT212534 Vendor Advisory
- https://support.apple.com/en-us/HT212528 Vendor Advisory
- https://support.apple.com/en-us/HT212529 Vendor Advisory
- https://support.apple.com/en-us/HT212532 Vendor Advisory
- https://support.apple.com/en-us/HT212533 Vendor Advisory
- https://support.apple.com/en-us/HT212534 Vendor Advisory