CVE-2021-30952 — Apple Multiple Products Integer Overflow or Wraparound Vulnerability

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-03-05 00:00 UTC
  • Importiert: 2026-10-20 22:46 UTC
  • CVSS: 8.8
  • Quelle-ID: cisa_kev
  • uid_hash: e2e2124a145763a29afb77183e126047b1170b7cced737eb2fe54ce996c2d734

Inhalt

Vendor / Project: Apple Product: Multiple Products Description: Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution. Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due Date: 2026-03-26 Ransomware Campaign Use: Unknown CWEs: CWE-190 Notes: https://support.apple.com/en-us/HT212975 ; https://support.apple.com/en-us/HT212976 ; https://support.apple.com/en-us/HT212978 ; https://support.apple.com/en-us/HT212980 ; https://support.apple.com/en-us/HT212982 ; https://nvd.nist.gov/vuln/detail/CVE-2021-30952

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2021-30952

HIGH

8.8

HIGH

8.8

2021-08-24

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CISA – Known Exploited Vulnerabilities (KEV)

cisa_kev

threat_intel cisa, kev - de https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json