CVE-2021-30665
Summary
| CVE | CVE-2021-30665 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-09-08 15:15:00 UTC |
| Updated | 2022-05-03 16:04:00 UTC |
| Description | A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
Risk And Classification
EPSS: 0.006080000 probability, percentile 0.696150000 (date 2026-04-01)
CISA KEV: Listed on 2021-11-03; due 2021-11-17; ransomware use Unknown
Problem Types: CWE-787
CISA Known Exploited Vulnerability
| Vendor | Apple |
|---|---|
| Product | Multiple Products |
| Name | Apple Multiple Products WebKit Memory Corruption Vulnerability |
| Required Action | Apply updates per vendor instructions. |
| Notes | https://nvd.nist.gov/vuln/detail/CVE-2021-30665 |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| About the security content of tvOS 14.6 - Apple Support | MISC | support.apple.com | |
| About the security content of iOS 12.5.3 - Apple Support | MISC | support.apple.com | |
| About the security content of macOS Big Sur 11.3.1 - Apple Support | MISC | support.apple.com | |
| About the security content of iOS 14.5.1 and iPadOS 14.5.1 - Apple Support | MISC | support.apple.com | |
| About the security content of watchOS 7.4.1 - Apple Support | MISC | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
| CISA Known Exploited Vulnerabilities catalog | CISA | www.cisa.gov | kev |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159499 Oracle Enterprise Linux Security Update for GNOME (ELSA-2021-4381)
- 178727 Debian Security Update for webkit2gtk (DSA 4945-1)
- 180507 Debian Security Update for wpewebkitwebkit2gtk (CVE-2021-30665)
- 198444 Ubuntu Security Notification for WebKitGTK vulnerabilities (USN-5024-1)
- 239811 Red Hat Update for gnome security (RHSA-2021:4381)
- 281748 Fedora Security Update for webkit2gtk3 (FEDORA-2021-cf7d8c7b1a)
- 281779 Fedora Security Update for webkit2gtk3 (FEDORA-2021-3de956ceee)
- 296065 Oracle Solaris 11.4 Support Repository Update (SRU) 39.107.1 Missing (CPUOCT2021)
- 355438 Amazon Linux Security Advisory for webkitgtk4 : ALAS2-2023-2088
- 375509 Apple Safari Multiple Vulnerabilities (HT212318)
- 375590 Apple MacOS Big Sur 11.3.1 Not Installed (HT212335)
- 501942 Alpine Linux Security Update for webkit2gtk
- 505521 Alpine Linux Security Update for webkit2gtk
- 610335 Apple iOS 14.5.1 and iPadOS 14.5.1 Security Update Missing (HT212336)
- 610336 Apple iOS 12.5.3 Security Update Missing (HT212341)
- 710570 Gentoo Linux WebkitGTK+ Multiple Vulnerabilities (GLSA 202202-01)
- 750913 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2021:2600-1)
- 750917 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2021:2598-1)
- 750943 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2021:1101-1)
- 750971 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2021:2762-1)
- 940070 AlmaLinux Security Update for GNOME (ALSA-2021:4381)
- 960077 Rocky Linux Security Update for GNOME (RLSA-2021:4381)