Vulnerability Description
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 15.0 |
| Apple | Ipados | < 14.8 |
| Apple | Iphone Os | < 14.8 |
| Apple | Macos | < 12.0.1 |
| Apple | Tvos | < 15.0 |
| Apple | Watchos | < 8.0 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2021/12/20/6Mailing ListThird Party Advisory
- https://support.apple.com/en-us/HT212807Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212814Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212815Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212816Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212819Release NotesVendor Advisory
- https://support.apple.com/kb/HT212869Vendor Advisory
- http://www.openwall.com/lists/oss-security/2021/12/20/6Mailing ListThird Party Advisory
- https://support.apple.com/en-us/HT212807Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212814Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212815Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212816Release NotesVendor Advisory
- https://support.apple.com/en-us/HT212819Release NotesVendor Advisory
- https://support.apple.com/kb/HT212869Vendor Advisory
FAQ
What is CVE-2021-30818?
CVE-2021-30818 is a vulnerability with a CVSS score of 8.8 (HIGH). A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted ...
How severe is CVE-2021-30818?
CVE-2021-30818 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-30818?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Ipados, Apple Iphone Os, Apple Macos, Apple Tvos.