High severity8.8CISA KEVNVD Advisory· Published Aug 24, 2021· Updated Jun 17, 2026
CVE-2021-30858
CVE-2021-30858
Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
53cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: >=13.1,<14.8
- (no CPE)range: iPadOS 14.8
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <11.6
- (no CPE)range: unspecified
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- Range: macOS Big Sur 11.6
iOS 14.8+ 1 more
- (no CPE)range: iOS 14.8
- (no CPE)range: unspecified
- osv-coords41 versionspkg:rpm/opensuse/gtk3&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.3pkg:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP2pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Server%204.1pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 2.32.4-1.1+ 40 more
- (no CPE)range: < 2.32.4-1.1
- (no CPE)range: < 2.32.4-lp152.2.19.1
- (no CPE)range: < 2.32.4-12.3
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.32.4-12.3
- (no CPE)range: < 2.32.4-12.3
- (no CPE)range: < 2.32.4-12.3
- (no CPE)range: < 2.32.4-12.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.32.4-3.82.1
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.34.3-23.3
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
- (no CPE)range: < 2.32.4-2.71.2
Patches
Vulnerability mechanics
References
19- seclists.org/fulldisclosure/2021/Sep/25nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Sep/27nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Sep/29nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Sep/38nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Sep/39nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Sep/50nvdMailing ListThird Party Advisory
- support.apple.com/en-us/HT212804nvdThird Party Advisory
- support.apple.com/en-us/HT212807nvdThird Party Advisory
- support.apple.com/kb/HT212824nvdThird Party Advisory
- www.debian.org/security/2021/dsa-4975nvdMailing ListThird Party Advisory
- www.debian.org/security/2021/dsa-4976nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2021/09/20/1nvdMailing List
- www.openwall.com/lists/oss-security/2021/10/26/9nvdMailing List
- www.openwall.com/lists/oss-security/2021/10/27/1nvdMailing List
- www.openwall.com/lists/oss-security/2021/10/27/2nvdMailing List
- www.openwall.com/lists/oss-security/2021/10/27/4nvdMailing List
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/nvdRelease Notes
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/nvdRelease Notes
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.