CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Apple iOS, iPadOS, and macOS WebKit Logic Issue Remote Code Execution Vulnerability (CVE-2021-1871)
[Affected Scope] Systems running iOS versions prior to 14.4, iPadOS versions prior to 14.4, macOS Big Sur versions prior to 11.2, and Catalina/Mojave without Security Update 2021-001
[Impact] A remote attacker can execute arbitrary code on the target system, and active exploitation in the wild has been reported
[Mitigation] Immediately apply the official Apple software updates to upgrade to iOS/iPadOS 14.4, macOS Big Sur 11.2, or later
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability (CVE-2021-1870, CISA KEV)
[Affected Scope] Apple iOS before 14.4, iPadOS before 14.4, macOS Big Sur before 11.2, and macOS Catalina/Mojave prior to Security Update 2021-001.
[Impact] A remote attacker can execute arbitrary code on the target device via malicious web content, bypassing sandbox restrictions. This vulnerability has been actively exploited in the wild.
[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to iOS/iPadOS 14.4, macOS Big Sur 11.2, or later.