All vulnerabilities
CVE-2021-1789

Apple Multiple Products Type Confusion Vulnerability

Apple Multiple Products
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationExploited in the wildAdded to KEV 4 May 2022CISA KEV
Exploit odds (EPSS)14.0%Chance of exploitation activity in the next 30 days, higher than 96% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in14.4Also 11.2, 7.3 and 1 moreCVE List
Federal deadline25 May 2022Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 2 Apr 2021, 18:01 UTCPublishedCVE List
  2. 4 May 2022Added to CISA KEVCISA KEV

Description

A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.

Text from CVE List

Affected versions 5

  • iOS and iPadOSaffected: unspecified before 14.4CVE List
  • macOSaffected: unspecified before 11.2CVE List
  • macOSaffected: unspecified before 7.3CVE List
  • macOSaffected: unspecified before 14.4CVE List
  • macOSaffected: unspecified before 14.0CVE List

References 10