CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2021-30952
High (7.8) in Apple Multiple Products. In CISA KEV since 2026-03-05. EPSS 7.0% chance of exploitation in the next 30 days.
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Severity
- EPSS
- 7.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2026-03-05, due 2026-03-26
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:ipados
- apple:iphone_os
- apple:macos
- apple:safari
- apple:tvos
- apple:watchos
- debian:debian_linux
- fedoraproject:fedora
- webkitgtk:webkitgtk
- wpewebkit:wpe_webkit
References
- http://www.openwall.com/lists/oss-security/2022/01/21/2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
- https://support.apple.com/en-us/HT212975
- https://support.apple.com/en-us/HT212976