CVE-2021-30860

HIGHCISA KEV

7.8

Descricao

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Detalhes CVE

Pontuacao CVSS v3.17.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado8/24/2021

Ultima modificacao10/27/2025

Fontekev

Avistamentos honeypot0

CISA KEV

FornecedorApple

ProdutoMultiple Products

Nome da vulnerabilidadeApple Multiple Products Integer Overflow Vulnerability

Data inclusao KEV2021-11-03

Prazo de remediacao2021-11-17

Uso em ransomwareUnknown

Produtos afetados

apple:ipadosapple:iphone_osapple:mac_os_xapple:macosapple:watchosfreedesktop:popplerxpdfreader:xpdf

Fraquezas (CWE)

CWE-190CWE-190

Referencias

http://seclists.org/fulldisclosure/2021/Sep/25(product-security@apple.com)

http://seclists.org/fulldisclosure/2021/Sep/26(product-security@apple.com)

http://seclists.org/fulldisclosure/2021/Sep/27(product-security@apple.com)

http://seclists.org/fulldisclosure/2021/Sep/28(product-security@apple.com)

http://seclists.org/fulldisclosure/2021/Sep/38(product-security@apple.com)

http://seclists.org/fulldisclosure/2021/Sep/39(product-security@apple.com)

http://seclists.org/fulldisclosure/2021/Sep/40(product-security@apple.com)

http://seclists.org/fulldisclosure/2021/Sep/50(product-security@apple.com)

http://www.openwall.com/lists/oss-security/2022/09/02/11(product-security@apple.com)

https://security.gentoo.org/glsa/202209-21(product-security@apple.com)

https://support.apple.com/en-us/HT212804(product-security@apple.com)

https://support.apple.com/en-us/HT212805(product-security@apple.com)

https://support.apple.com/en-us/HT212806(product-security@apple.com)

https://support.apple.com/en-us/HT212807(product-security@apple.com)

https://support.apple.com/kb/HT212824(product-security@apple.com)

http://seclists.org/fulldisclosure/2021/Sep/25(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2021/Sep/26(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2021/Sep/27(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2021/Sep/28(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2021/Sep/38(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2021/Sep/39(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2021/Sep/40(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2021/Sep/50(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2022/09/02/11(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202209-21(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212804(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212805(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212806(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212807(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT212824(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30860(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.