CVE Watch—

CVE-2021-1870

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

7.9%

p94

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

7.9%EPSS · 30 days7.9%

2026-06-302026-07-16

KEV catalog record

Product

Apple / iOS, iPadOS, and macOS

Vulnerability

Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

Nov 17, 2021

Known ransomware use

Summary description

Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-1870

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-28206—

97.6%

KEV—79Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability—CVE-2025-43300—

97.1%

KEV—79Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability—CVE-2022-22620—

96.6%

KEV—79Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability—CVE-2023-41064—

96.4%

KEV—79Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability—CVE-2021-30858—

96.0%

KEV—79Apple iOS, iPadOS, macOS Use-After-Free Vulnerability—CVE-2021-1871—

93.5%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—