CVE Watch—

CVE-2021-30858

Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

CVSS

—

No CVSS

EPSS

13.4%

p96

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

13.4%EPSS · 30 days13.4%

2026-09-172026-10-15

KEV catalog record

Product

Apple / iOS, iPadOS, and macOS

Vulnerability

Apple iOS, iPadOS, macOS Use-After-Free Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

Nov 17, 2021

Known ransomware use

Summary description

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-30858

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-41064—

99.0%

KEV—80Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability—CVE-2025-43300—

98.3%

KEV—80Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability—CVE-2023-28206—

97.7%

KEV—79Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability—CVE-2022-22620—

96.9%

KEV—79Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability—CVE-2021-1870—

94.5%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—CVE-2021-1871—

94.1%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—