← Back to CVEs

CVE-2021-30952

HIGHCISA KEV

7.8

Description

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published8/24/2021

Last Modified3/6/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorApple

ProductMultiple Products

Vulnerability NameApple Multiple Products Integer Overflow or Wraparound Vulnerability

KEV Date Added2026-03-05

Remediation Due Date2026-03-26

Ransomware UseUnknown

Affected Products

apple:ipadosapple:iphone_osapple:macosapple:safariapple:tvosapple:watchosdebian:debian_linuxfedoraproject:fedorawebkitgtk:webkitgtkwpewebkit:wpe_webkit

Weaknesses (CWE)

CWE-190CWE-190

References

http://www.openwall.com/lists/oss-security/2022/01/21/2(product-security@apple.com)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/(product-security@apple.com)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/(product-security@apple.com)

https://support.apple.com/en-us/HT212975(product-security@apple.com)

https://support.apple.com/en-us/HT212976(product-security@apple.com)

https://support.apple.com/en-us/HT212978(product-security@apple.com)

https://support.apple.com/en-us/HT212980(product-security@apple.com)

https://support.apple.com/en-us/HT212982(product-security@apple.com)

https://www.debian.org/security/2022/dsa-5060(product-security@apple.com)

https://www.debian.org/security/2022/dsa-5061(product-security@apple.com)

http://www.openwall.com/lists/oss-security/2022/01/21/2(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/(af854a3a-2127-422b-91ae-364da2661108)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212975(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212976(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212978(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212980(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212982(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2022/dsa-5060(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2022/dsa-5061(af854a3a-2127-422b-91ae-364da2661108)

https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30952(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.