CVE-2021-30997

HIGH

iPadOS < 15.2 - S/MIME Encrypted Email Plaintext Exposure

Title source: llm
STIX 2.1

Description

A S/MIME issue existed in the handling of encrypted email. This issue was addressed by not automatically loading some MIME parts. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker may be able to recover plaintext contents of an S/MIME-encrypted e-mail.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212976

Scores

CVSS v3 7.5
EPSS 0.0065
EPSS Percentile 46.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-312
Status published
Products (2)
apple/ipados < 15.2
apple/iphone_os < 15.2
Published Aug 24, 2021
Tracked Since Feb 18, 2026