All vulnerabilities
CVE-2021-30883

Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationExploited in the wildAdded to KEV 23 May 2022CISA KEV
Exploit odds (EPSS)14.7%Chance of exploitation activity in the next 30 days, higher than 96% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in15.0Also 14.8, 12.0 and 3 moreCVE List
Federal deadline13 Jun 2022Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 24 Aug 2021, 18:49 UTCPublishedCVE List
  2. 23 May 2022Added to CISA KEVCISA KEV

Description

Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.

Text from CVE List

Affected versions 6

  • iOS and iPadOSaffected: unspecified before 15.0CVE List
  • iOS and iPadOSaffected: unspecified before 14.8CVE List
  • macOSaffected: unspecified before 12.0CVE List
  • macOSaffected: unspecified before 11.6CVE List
  • macOSaffected: unspecified before 8.1CVE List
  • macOSaffected: unspecified before 15.1CVE List

References 8