CVE-2021-1874

HIGH

iPadOS < 14.5 - Arbitrary Code Execution with Kernel Privileges

Title source: llm

Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary code with kernel privileges.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212317

Scores

CVSS v3 8.8

EPSS 0.0191

EPSS Percentile 77.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published

Products (2)

apple/ipados < 14.5

apple/iphone_os < 14.5

Published Sep 08, 2021

Tracked Since Feb 18, 2026