8.8
Élevée
Exploitée
CVE-2021-30762 Apple iOS WebKit Use-After-Free Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-416
Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| iOS 12.5 | premières → < 12.5 | 12.5 |
Références
- support.apple.com support.apple.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de iOS
Les 507 CVE de iOS →
CVE-2024-44229
An information leakage was addressed with additional validation
5.3
Moyenne
CVE-2024-44218
This issue was addressed with improved checks
7.8
Élevée
CVE-2024-40867
A custom URL scheme handling issue was addressed with improved input validation
8.8
Élevée
CVE-2024-44259
This issue was addressed through improved state management
8.8
Élevée