VULNERABILITY INTELLIGENCE

CVE-2021-30952

CVSS score7.8 HIGH

EPSS probability6.96%

CISA KEVKnown exploited vulnerability

Published2021-08-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Vendor / product: Apple / Multiple Products

Description

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Weakness classification

nvd@nist.gov: CWE-190
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-190

Primary references

product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Broken Link
product-security@apple.com — Broken Link
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link