In CISA KEVNot scored
CVE-2021-30952
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
AppleMultiple Products
Status
- Exploited in the wild
- In CISA KEV since 5 Mar
- Vendor fix available
Federal deadlineThu 26 Mar, 23:59 UTC
Passed 212 days ago
CISA KEV · added 5 Mar
Exploit probabilityEPSSchecked 25 Oct
7.0%probability of exploitation in the next 30 days
Higher than 94% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 3 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 5 Mar · 21:25 UTC | CISA | Apple CVE-2021-30952 sees active exploitation across devices |
| Thu 5 Mar · 21:44 UTC | CISA | CVE-2021-30952: Apple Integer Overflow Could Allow Code Execution |
| Fri 6 Mar · 09:57 UTC | Security Affairs | CISA Adds CVEs to KEV for Apple Rockwell and Hikvision Flaws |
- CISA Adds CVEs to KEV for Apple Rockwell and Hikvision FlawsSecurity Affairs · mentions it in passing
- CVE-2021-30952: Apple Integer Overflow Could Allow Code ExecutionCISA · official notice
- Apple CVE-2021-30952 sees active exploitation across devicesCISA · first in our coverage · official notice