CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2021-307628.8/HIGHEPSS 11.0%CISA KEV
2021-09-08

Apple iOS WebKit Use-After-Free Vulnerability (CVE-2021-30762) Technical Advisory

[Affected Scope] Legacy Apple devices running iOS versions prior to 12.5.4 (including iPhone 5s, iPhone 6, iPad Air, iPad mini 2/3, and iPod touch 6th gen)

[Impact] Processing maliciously crafted web content may trigger a Use-After-Free condition, leading to arbitrary code execution (RCE) and potential device compromise

[Mitigation] Immediately update affected legacy iOS devices to version 12.5.4 or later, and restrict access to untrusted web links

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse