← Voltar para CVEs
CVE-2021-30665
HIGHCISA KEV8.8
Descricao
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Detalhes CVE
Pontuacao CVSS v3.18.8
SeveridadeHIGH
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioREQUIRED
Publicado9/8/2021
Ultima modificacao10/23/2025
Fontekev
Avistamentos honeypot0
CISA KEV
FornecedorApple
ProdutoMultiple Products
Nome da vulnerabilidadeApple Multiple Products WebKit Memory Corruption Vulnerability
Data inclusao KEV2021-11-03
Prazo de remediacao2021-11-17
Uso em ransomwareUnknown
Produtos afetados
apple:ipadosapple:iphone_osapple:macosapple:tvosapple:watchos
Fraquezas (CWE)
CWE-787CWE-787
Referencias
https://support.apple.com/en-us/HT212335(product-security@apple.com)
https://support.apple.com/en-us/HT212336(product-security@apple.com)
https://support.apple.com/en-us/HT212339(product-security@apple.com)
https://support.apple.com/en-us/HT212341(product-security@apple.com)
https://support.apple.com/en-us/HT212532(product-security@apple.com)
https://support.apple.com/en-us/HT212335(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212336(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212339(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212341(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212532(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30665(134c704f-9b21-4f2e-91b3-4a467353bcc0)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.