← Volver a CVEs
CVE-2021-30665
HIGHCISA KEV8.8
Descripcion
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Detalles CVE
Puntuacion CVSS v3.18.8
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado9/8/2021
Ultima modificacion10/23/2025
Fuentekev
Avistamientos honeypot0
CISA KEV
VendedorApple
ProductoMultiple Products
Nombre vulnerabilidadApple Multiple Products WebKit Memory Corruption Vulnerability
Fecha inclusion KEV2021-11-03
Fecha limite remediacion2021-11-17
Uso en ransomwareUnknown
Productos afectados
apple:ipadosapple:iphone_osapple:macosapple:tvosapple:watchos
Debilidades (CWE)
CWE-787CWE-787
Referencias
https://support.apple.com/en-us/HT212335(product-security@apple.com)
https://support.apple.com/en-us/HT212336(product-security@apple.com)
https://support.apple.com/en-us/HT212339(product-security@apple.com)
https://support.apple.com/en-us/HT212341(product-security@apple.com)
https://support.apple.com/en-us/HT212532(product-security@apple.com)
https://support.apple.com/en-us/HT212335(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212336(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212339(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212341(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212532(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30665(134c704f-9b21-4f2e-91b3-4a467353bcc0)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.