PT-2021-4455 · Apple+7 · Ipados+9
Published
2021-08-24
·
Updated
2025-10-27
·
CVE-2021-30858
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 14.8
Apple iPadOS versions prior to 14.8
Apple macOS versions prior to Big Sur 11.6
Description
The issue is related to a use-after-free problem, which can be exploited by a remote attacker to execute arbitrary code. This can occur when processing maliciously crafted web content. There have been reports that this issue may have been actively exploited.
Recommendations
For Apple iOS versions prior to 14.8, update to iOS 14.8 or later to resolve the issue.
For Apple iPadOS versions prior to 14.8, update to iPadOS 14.8 or later to resolve the issue.
For Apple macOS versions prior to Big Sur 11.6, update to macOS Big Sur 11.6 or later to resolve the issue.
As a temporary workaround, consider avoiding the processing of maliciously crafted web content until a patch is available.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Suse
Ubuntu
Ios
Ipados