CVE-2021-30659

MEDIUM

iPadOS < 14.5 - Unauthenticated Sensitive User Information Leak via Validation Issue

Title source: llm

Description

A validation issue was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. A malicious application may be able to leak sensitive user information.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212317

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212324

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212325

Scores

CVSS v3 6.5

EPSS 0.0124

EPSS Percentile 65.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

Status published

Products (4)

apple/ipados < 14.5

apple/iphone_os < 14.5

apple/macos 11.0 - 11.3

apple/watchos < 7.4

Published Sep 08, 2021

Tracked Since Feb 18, 2026