← Back to CVEs
CVE-2021-30883
HIGHCISA KEV7.8
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
CVE Details
CVSS v3.1 Score7.8
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published8/24/2021
Last Modified10/23/2025
Sourcekev
Honeypot Sightings0
CISA KEV
VendorApple
ProductMultiple Products
Vulnerability NameApple Multiple Products Memory Corruption Vulnerability
KEV Date Added2022-05-23
Remediation Due Date2022-06-13
Ransomware UseUnknown
Affected Products
apple:ipadosapple:iphone_osapple:macosapple:tvosapple:watchos
Weaknesses (CWE)
CWE-787CWE-787
References
https://support.apple.com/en-us/HT212846(product-security@apple.com)
https://support.apple.com/en-us/HT212868(product-security@apple.com)
https://support.apple.com/en-us/HT212869(product-security@apple.com)
https://support.apple.com/en-us/HT212872(product-security@apple.com)
https://support.apple.com/en-us/HT212874(product-security@apple.com)
https://support.apple.com/en-us/HT212876(product-security@apple.com)
https://support.apple.com/en-us/HT212846(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212868(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212869(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212872(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212874(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212876(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30883(134c704f-9b21-4f2e-91b3-4a467353bcc0)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.