CVEvulnerability
CVE-2021-30758
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-09-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-843
Description
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 14.1.2)
• apple iphone os (< 14.7)
• apple macos (< 11.5)
• apple tvos (< 14.7)
• apple watchos (< 7.6)
Related
Weakness · CWE (1)
- CWE-843 Access of Resource Using Incompatible Type weakness
References
- https://support.apple.com/en-us/HT212601 Vendor Advisory
- https://support.apple.com/en-us/HT212602 Vendor Advisory
- https://support.apple.com/en-us/HT212604 Vendor Advisory
- https://support.apple.com/en-us/HT212605 Vendor Advisory
- https://support.apple.com/en-us/HT212606 Vendor Advisory
- https://support.apple.com/en-us/HT212601 Vendor Advisory
- https://support.apple.com/en-us/HT212602 Vendor Advisory
- https://support.apple.com/en-us/HT212604 Vendor Advisory
- https://support.apple.com/en-us/HT212605 Vendor Advisory
- https://support.apple.com/en-us/HT212606 Vendor Advisory