CISA
CVE-2021-30952: Apple Integer Overflow Could Allow Code Execution
According to CISA, the Known Exploited Vulnerabilities (KEV) catalog lists CVE-2021-30952 as an Apple vulnerability affecting multiple products. It is described as an Integer Overflow or Wraparound vulnerability impacting Apple tvOS, macOS, Safari, iPadOS and watchOS, due to the processing of maliciously crafted web content, with potential arbitrary code execution. The entry shows Date Added as 5 March 2026 and Due Date as 26 March 2026, and notes that it is Unknown whether it has been used in ransomware campaigns.
The recommended action is to apply mitigations per vendor instructions, follow applicable guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Additional notes provide links to Apple support pages and the NVD entry for further details.
Story timeline CVE-2021-30952
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 5 Mar · 21:25 UTC | CISA | Apple CVE-2021-30952 sees active exploitation across devices |
| Thu 5 Mar · 21:44 UTC | CISA | CVE-2021-30952: Apple Integer Overflow Could Allow Code Execution (this article) |
| Fri 6 Mar · 09:57 UTC | Security Affairs | CISA Adds CVEs to KEV for Apple Rockwell and Hikvision Flaws |
| Fri 6 Mar · 13:30 UTC | SecurityWeek | CISA Adds Coruna iOS Exploit Kit Flaws to the KEV List, 12 CVEs |
| Fri 6 Mar · 20:11 UTC | Ars Technica | CISA orders patch after Coruna kit exploits three iOS CVEs |