CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-08-24
Apple iOS, iPadOS, macOS, watchOS Integer Overflow Remote Code Execution Vulnerability (CVE-2021-30860, FORCEDENTRY)
[Affected Scope] Apple iOS before 14.8, iPadOS before 14.8, macOS Big Sur before 11.6, macOS Catalina (prior to Security Update 2021-005), and watchOS before 7.6.2
[Impact] Processing a maliciously crafted PDF or image file can lead to arbitrary code execution without user interaction (Zero-Click), potentially resulting in complete device compromise
[Mitigation] Immediately apply the official security updates provided by Apple (iOS 14.8, macOS 11.6, etc.) and consider enabling Lockdown Mode for high-risk environments