VULNERABILITY INTELLIGENCE

CVE-2021-30666

CVSS score8.8 HIGH

EPSS probability3.00%

CISA KEVKnown exploited vulnerability

Published2021-09-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Apple iOS WebKit Buffer Overflow Vulnerability

Vendor / product: Apple / iOS

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Weakness classification

nvd@nist.gov: CWE-119
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-119

Primary references

product-security@apple.com — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory, US Government Resource