VULNERABILITY INTELLIGENCE
CVE-2021-30802
CVSS score8.8 HIGH
EPSS probability1.33%
CISA KEVNot currently listed
Published2021-09-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Weakness classification
- nvd@nist.gov: CWE-416
Primary references
- product-security@apple.com — Release Notes, Vendor Advisory
- product-security@apple.com — Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory