CVE-2021-30762 — Apple iOS WebKit Use-After-Free Vulnerability

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2021-11-03 00:00 UTC
  • Importiert: 2026-10-20 22:46 UTC
  • CVSS: 8.8
  • Quelle-ID: cisa_kev
  • uid_hash: 457298fe7eb8a23b8fc4b3adba69354a7182838e0b31053d9b732594d9c6997c

Inhalt

Vendor / Project: Apple Product: iOS Description: Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Required Action: Apply updates per vendor instructions. Due Date: 2021-11-17 Ransomware Campaign Use: Unknown CWEs: CWE-416 Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30762

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2021-30762

HIGH

8.8

HIGH

8.8

2021-09-08

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CISA – Known Exploited Vulnerabilities (KEV)

cisa_kev

threat_intel cisa, kev - de https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json