CVE-2021-30665
Apple Multiple Products WebKit Memory Corruption Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
YesDecision
Descriptions
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Se abordó un problema de corrupción de la memoria con una administración de estado mejorada. Este problema es corregido en watchOS versión 7.4.1, iOS versión 14.5.1 y iPadOS versión 14.5.1, tvOS versión 14.6, iOS versión 12.5.3, macOS Big Sur versión 11.3.1. El procesamiento de contenido web maliciosamente diseñado puede conllevar a una ejecución de código arbitrario. Apple está al tanto de un informe de que este problema puede haber sido explotado activamente
A flaw was found in the webkitgtk package. Affected versions of this package could allow a remote attacker to execute arbitrary code on the system caused by a memory corruption issue in the WebKit component. An attacker can execute arbitrary code on the system by persuading a victim to visit a specially crafted Web site.
Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-04-13 CVE Reserved
- 2021-05-04 CVE Published
- 2021-11-03 Exploited in Wild
- 2021-11-17 KEV Due Date
- 2024-05-24 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
- CWE-787: Out-of-bounds Write
CAPEC
References (7)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.apple.com/en-us/HT212335 | 2024-05-16 | |
| https://support.apple.com/en-us/HT212336 | 2024-05-16 | |
| https://support.apple.com/en-us/HT212339 | 2024-05-16 | |
| https://support.apple.com/en-us/HT212341 | 2024-05-16 | |
| https://support.apple.com/en-us/HT212532 | 2024-05-16 | |
| https://access.redhat.com/security/cve/CVE-2021-30665 | 2021-11-09 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1986874 | 2021-11-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apple Search vendor "Apple" | Ipados Search vendor "Apple" for product "Ipados" | < 14.5.1 Search vendor "Apple" for product "Ipados" and version " < 14.5.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Iphone Os Search vendor "Apple" for product "Iphone Os" | < 12.5.3 Search vendor "Apple" for product "Iphone Os" and version " < 12.5.3" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Iphone Os Search vendor "Apple" for product "Iphone Os" | >= 13.0 < 14.5.1 Search vendor "Apple" for product "Iphone Os" and version " >= 13.0 < 14.5.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | < 11.3.1 Search vendor "Apple" for product "Macos" and version " < 11.3.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Tvos Search vendor "Apple" for product "Tvos" | < 14.6 Search vendor "Apple" for product "Tvos" and version " < 14.6" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Watchos Search vendor "Apple" for product "Watchos" | < 7.4.1 Search vendor "Apple" for product "Watchos" and version " < 7.4.1" | - |
Affected
| ||||||