CVE-2021-30936

HIGH

Safari < 15.2 - Use-After-Free via Malicious Web Content

Title source: llm
STIX 2.1

Description

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References (10)

Core 10
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212975
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212976
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212978
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212980
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212982
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2022/dsa-5061
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2022/dsa-5060
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2022/01/21/2

Scores

CVSS v3 8.8
EPSS 0.0096
EPSS Percentile 76.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (9)
apple/ipados < 15.2
apple/iphone_os < 15.2
apple/macos 12.0 - 12.1
apple/safari < 15.2
apple/tvos < 15.2
apple/watchos < 8.3
debian/debian_linux 10.0
debian/debian_linux 11.0
fedoraproject/fedora 34
Published Aug 24, 2021
Tracked Since Feb 18, 2026