CVEvulnerability
CVE-2021-31008
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-08-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-843
Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 15.1, tvOS 15.1, iOS 15 and iPadOS 15, macOS Monterey 12.0.1, watchOS 8.1. Processing maliciously crafted web content may lead to code execution.
Affected configurations
• apple safari (< 15.1)
• apple ipados (< 15.0)
• apple iphone os (< 15.0)
• apple macos 12.0.0
• apple tvos (< 15.1)
• apple watchos (< 8.1)
Related
Weakness · CWE (1)
- CWE-843 Access of Resource Using Incompatible Type weakness
References
- https://support.apple.com/en-us/HT212814 support.apple.com
- https://support.apple.com/en-us/HT212869 support.apple.com
- https://support.apple.com/en-us/HT212874 support.apple.com
- https://support.apple.com/en-us/HT212875 support.apple.com
- https://support.apple.com/en-us/HT212876 support.apple.com
- https://support.apple.com/en-us/HT212814 support.apple.com
- https://support.apple.com/en-us/HT212869 support.apple.com
- https://support.apple.com/en-us/HT212874 support.apple.com
- https://support.apple.com/en-us/HT212875 support.apple.com
- https://support.apple.com/en-us/HT212876 support.apple.com