en Se connecter

8.8 Élevée Exploitée

CVE-2021-30858 Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-416

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
macOS 11.6	premières → < 11.6	11.6
iOS 14.8	premières → < 14.8	14.8

Références

support.apple.com support.apple.com
support.apple.com support.apple.com
20210917 APPLE-SA-2021-09-13-3 macOS Big Sur 11.6 seclists.org
20210917 APPLE-SA-2021-09-13-1 iOS 14.8 and iPadOS 14.8 seclists.org
20210917 APPLE-SA-2021-09-13-5 Safari 14.1.2 seclists.org
[oss-security] 20210920 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0005 www.openwall.com
FEDORA-2021-c00e45b6c0 lists.fedoraproject.org
20210921 APPLE-SA-2021-09-20-6 Additional information for APPLE-SA-2021-09-13-1 iOS 14.8 and iPadOS 14.8 seclists.org
20210921 APPLE-SA-2021-09-20-7 Additional information for APPLE-SA-2021-09-13-3 macOS Big Sur 11.6 seclists.org
DSA-4975 www.debian.org
DSA-4976 www.debian.org
support.apple.com support.apple.com
20210924 APPLE-SA-2021-09-23-1 iOS 12.5.5 seclists.org
FEDORA-2021-edf6957b7d lists.fedoraproject.org
[oss-security] 20211026 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006 www.openwall.com
[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006 www.openwall.com
[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006 www.openwall.com
[oss-security] 20211027 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006 www.openwall.com

Chronologie

Publiée 24 août 2021
Ajoutée au catalogue KEV 3 novembre 2021
Dernière modification 21 octobre 2025

Les 3813 CVE de macOS →

CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Moyenne CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 Élevée CVE-2026-113945 An out-of-bounds read was addressed with improved bounds checking 5.5 Moyenne CVE-2026-65327 A logic issue was addressed with improved checks 8.4 Élevée

Suivre cette CVE