Vulnerability Description
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 15.0 |
| Apple | Ipados | < 15.0 |
| Apple | Iphone Os | < 15.0 |
| Apple | Macos | < 12.0.1 |
| Apple | Tvos | < 15.0 |
| Apple | Watchos | < 8.0 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2021/12/20/6Mailing ListThird Party Advisory
- https://support.apple.com/en-us/HT212814Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212815Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212816Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212819Release NotesVendor Advisory
- https://support.apple.com/kb/HT212869Vendor Advisory
- http://www.openwall.com/lists/oss-security/2021/12/20/6Mailing ListThird Party Advisory
- https://support.apple.com/en-us/HT212814Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212815Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212816Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212819Release NotesVendor Advisory
- https://support.apple.com/kb/HT212869Vendor Advisory
FAQ
What is CVE-2021-30809?
CVE-2021-30809 is a vulnerability with a CVSS score of 8.8 (HIGH). A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to...
How severe is CVE-2021-30809?
CVE-2021-30809 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-30809?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Ipados, Apple Iphone Os, Apple Macos, Apple Tvos.