IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
8.8Yüksek KEV

CVE-2021-30661Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

Apple iOS and iPadOS; Apple Safari; Apple tvOS; Apple watchOS Yayım: (5 yıl önce)

Aktif olarak istismar ediliyor — Apple Multiple Products WebKit Storage Use-After-Free Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 03.11.2021 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 17.11.2021.

Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2021-30661

Açıklama

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

Zayıflık türü (CWE): CWE-416

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Apple iOS and iPadOS unspecified – < 14.5
apple ipados < 14.5
apple iphone os < 12.5.3
Apple macOS unspecified – < 11.3
Apple Safari unspecified – < 14.1
Apple tvOS unspecified – < 14.5
Apple watchOS unspecified – < 7.4

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (7)
  • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* < 14.1
  • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* < 14.5
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* < 12.5.3
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* ≥ 14.0 < 14.5
  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* ≥ 11.0 < 11.3
  • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* < 14.5
  • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* < 7.4

Aynı üründe son açıklar — Apple iOS / iPadOS

8.8Yüksek
CVE-2026-113970
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15…

3.5Düşük
CVE-2026-113971
Apple iOS and iPadOS

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen.

5.4Orta
CVE-2026-113964
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macO…

5.4Orta
CVE-2026-113965
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

This issue was addressed with improved checks. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.…

5.4Orta
CVE-2026-113968
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macO…

7.5Yüksek
CVE-2026-113969
Apple HomeView Software; Apple iOS and iPadOS; Apple macOS; Apple tvOS

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macO…