CVE-2021-30661
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
CVSS
—
No CVSS
EPSS
4.5%
p90
KEV
YES
Nov 3, 2021
Exploit Today
77
0-100
Published: — · Last modified: —
Product
Apple / Multiple Products
Vulnerability
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
Nov 17, 2021
Known ransomware use
No
Summary description
Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-30661