CVE Watch—

CVE-2021-30860

Apple Multiple Products Integer Overflow Vulnerability

CVSS

—

No CVSS

EPSS

76.0%

p100

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

76.0%EPSS · 30 days76.0%

2026-09-162026-10-14

KEV catalog record

Product

Apple / Multiple Products

Vulnerability

Apple Multiple Products Integer Overflow Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

Nov 17, 2021

Known ransomware use

Summary description

Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-30860

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-869508.8 HIG

68.6%

KEV—71Apple Multiple Products Out-of-Bounds Write Vulnerability14d CVE-2025-435298.8 HIG

95.1%

KEV—79Apple Multiple Products Use-After-Free WebKit Vulnerability8d CVE-2025-435205.5 MED

35.2%

KEV—61Apple Multiple Products Classic Buffer Overflow Vulnerability8d CVE-2025-435107.8 HIG

27.6%

KEV—58Apple Multiple Products Improper Locking Vulnerability8d CVE-2023-430008.8 HIG

90.5%

KEV—77Apple Multiple products Use-After-Free Vulnerability24d CVE-2025-312778.8 HIG

75.3%

KEV—73Apple Multiple Products Buffer Overflow Vulnerability24d