CVE-2021-30886

HIGH

macOS Monterey <12.0.1 - Use After Free

Title source: llm
STIX 2.1

Description

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. An application may be able to execute arbitrary code with kernel privileges.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212869
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212867
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212874
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212876

Scores

CVSS v3 7.8
EPSS 0.0123
EPSS Percentile 65.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (5)
apple/ipados < 15.1
apple/iphone_os < 15.1
apple/macos < 12.0.1
apple/tvos < 15.1
apple/watchos < 8.1
Published Aug 24, 2021
Tracked Since Feb 18, 2026