CVE-2021-1864

CRITICAL

iPadOS < 14.5 - Remote Code Execution via Use-After-Free

Title source: llm
STIX 2.1

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212317
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212323
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212324

Scores

CVSS v3 9.8
EPSS 0.0209
EPSS Percentile 79.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (4)
apple/ipados < 14.5
apple/iphone_os < 14.5
apple/tvos < 14.5
apple/watchos < 7.4
Published Sep 08, 2021
Tracked Since Feb 18, 2026