CVE-2021-30952 KEV
7.8
HIGH · CVSS 3.1 · EPSS 7% (pctl 94)
Patch first
On CISA KEV — known exploited in the wild, due 2026-03-26.
Description
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Scoring
| CVSS | 7.8 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| EPSS | 6.96% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-190 |
| On CISA KEV | yes — remediate by 2026-03-26 |
| Public exploit | none known |
| Published | 2021-08-24 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | Apple Multiple Products Integer Overflow or Wraparound Vulnerability |
|---|---|
| Added | 2026-03-05 |
| Due | 2026-03-26 |
| Vendor / product | Apple / Multiple Products |
| Ransomware use | none reported |
Affected (10)
| Vendor | Product |
|---|---|
| apple | ipados |
| apple | iphone os |
| apple | macos |
| apple | safari |
| apple | tvos |
| apple | watchos |
| debian | debian linux |
| fedoraproject | fedora |
| webkitgtk | webkitgtk |
| wpewebkit | wpe webkit |
References
- http://www.openwall.com/lists/oss-security/2022/01/21/2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
- https://support.apple.com/en-us/HT212975
- https://support.apple.com/en-us/HT212976
- https://support.apple.com/en-us/HT212978
- https://support.apple.com/en-us/HT212980
- https://support.apple.com/en-us/HT212982
- https://www.debian.org/security/2022/dsa-5060
- https://www.debian.org/security/2022/dsa-5061
- http://www.openwall.com/lists/oss-security/2022/01/21/2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
- https://support.apple.com/en-us/HT212975
- https://support.apple.com/en-us/HT212976
- https://support.apple.com/en-us/HT212978
- https://support.apple.com/en-us/HT212980
- https://support.apple.com/en-us/HT212982
- https://www.debian.org/security/2022/dsa-5060
- https://www.debian.org/security/2022/dsa-5061
→ the Explorer · watch your stack · NVD