{"timestamp":"2025-01-29T17:31:17.221055Z","id":"CVE-2021-30858","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","lessThan":"11.6","versionType":"custom","status":"affected"}]},{"vendor":"Apple","product":"iOS","versions":[{"version":"unspecified","lessThan":"14.8","versionType":"custom","status":"affected"}]}]

CISA-ADP: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30858 Types: US Government Resource

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30858

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30858

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30858

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416

http://seclists.org/fulldisclosure/2021/Sep/25

http://seclists.org/fulldisclosure/2021/Sep/27

http://seclists.org/fulldisclosure/2021/Sep/29

http://seclists.org/fulldisclosure/2021/Sep/38

http://seclists.org/fulldisclosure/2021/Sep/39

http://seclists.org/fulldisclosure/2021/Sep/50

http://www.openwall.com/lists/oss-security/2021/09/20/1

http://www.openwall.com/lists/oss-security/2021/10/26/9

http://www.openwall.com/lists/oss-security/2021/10/27/1

http://www.openwall.com/lists/oss-security/2021/10/27/2

http://www.openwall.com/lists/oss-security/2021/10/27/4

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/

https://support.apple.com/en-us/HT212804

https://support.apple.com/en-us/HT212807

https://support.apple.com/kb/HT212824

https://www.debian.org/security/2021/dsa-4975

https://www.debian.org/security/2021/dsa-4976

http://seclists.org/fulldisclosure/2021/Sep/25 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/25 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/27 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/27 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/29 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/29 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/38 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/38 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/39 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/39 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/50 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/50 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/09/20/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/09/20/1 Mailing List

http://www.openwall.com/lists/oss-security/2021/10/26/9 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/26/9 Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/27/1 Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/27/2 Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/4 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/27/4 Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/ Release Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/ Release Notes

https://support.apple.com/en-us/HT212804 No Types Assigned

https://support.apple.com/en-us/HT212804 Third Party Advisory

https://support.apple.com/en-us/HT212807 No Types Assigned

https://support.apple.com/en-us/HT212807 Third Party Advisory

https://support.apple.com/kb/HT212824 No Types Assigned

https://support.apple.com/kb/HT212824 Third Party Advisory

https://www.debian.org/security/2021/dsa-4975 No Types Assigned

https://www.debian.org/security/2021/dsa-4975 Mailing List, Third Party Advisory

https://www.debian.org/security/2021/dsa-4976 No Types Assigned

https://www.debian.org/security/2021/dsa-4976 Mailing List, Third Party Advisory

MITRE

Apple Inc.

Apple Inc. http://seclists.org/fulldisclosure/2021/Sep/25 [No types assigned]

Apple Inc. http://seclists.org/fulldisclosure/2021/Sep/27 [No types assigned]

Apple Inc. http://seclists.org/fulldisclosure/2021/Sep/29 [No types assigned]

Apple Inc. http://seclists.org/fulldisclosure/2021/Sep/38 [No types assigned]

Apple Inc. http://seclists.org/fulldisclosure/2021/Sep/39 [No types assigned]

Apple Inc. http://seclists.org/fulldisclosure/2021/Sep/50 [No types assigned]

Apple Inc. http://www.openwall.com/lists/oss-security/2021/09/20/1 [No types assigned]

Apple Inc. http://www.openwall.com/lists/oss-security/2021/10/26/9 [No types assigned]

Apple Inc. http://www.openwall.com/lists/oss-security/2021/10/27/1 [No types assigned]

Apple Inc. http://www.openwall.com/lists/oss-security/2021/10/27/2 [No types assigned]

Apple Inc. http://www.openwall.com/lists/oss-security/2021/10/27/4 [No types assigned]

Apple Inc. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/ [No types assigned]

Apple Inc. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/ [No types assigned]

Apple Inc. https://support.apple.com/en-us/HT212804 [No types assigned]

Apple Inc. https://support.apple.com/en-us/HT212807 [No types assigned]

Apple Inc. https://support.apple.com/kb/HT212824 [No types assigned]

Apple Inc. https://www.debian.org/security/2021/dsa-4975 [No types assigned]

Apple Inc. https://www.debian.org/security/2021/dsa-4976 [No types assigned]

MITRE http://seclists.org/fulldisclosure/2021/Sep/25

MITRE http://seclists.org/fulldisclosure/2021/Sep/27

MITRE http://seclists.org/fulldisclosure/2021/Sep/29

MITRE http://seclists.org/fulldisclosure/2021/Sep/38

MITRE http://seclists.org/fulldisclosure/2021/Sep/39

MITRE http://seclists.org/fulldisclosure/2021/Sep/50

MITRE http://www.openwall.com/lists/oss-security/2021/09/20/1

MITRE http://www.openwall.com/lists/oss-security/2021/10/26/9

MITRE http://www.openwall.com/lists/oss-security/2021/10/27/1

MITRE http://www.openwall.com/lists/oss-security/2021/10/27/2

MITRE http://www.openwall.com/lists/oss-security/2021/10/27/4

MITRE https://lists.fedoraproject.org/archives/list/[email protected]/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/

MITRE https://lists.fedoraproject.org/archives/list/[email protected]/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/

MITRE https://support.apple.com/en-us/HT212804

MITRE https://support.apple.com/en-us/HT212807

MITRE https://support.apple.com/kb/HT212824

MITRE https://www.debian.org/security/2021/dsa-4975

MITRE https://www.debian.org/security/2021/dsa-4976

OR
     *cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* versions up to (excluding) 14.8
     *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (excluding) 14.8
     *cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* versions up to (excluding) 11.6

OR
     *cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* versions from (including) 13.1 up to (excluding) 14.8
     *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (excluding) 12.5.5
     *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions from (including) 13.0 up to (excluding) 14.8
     *cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* versions up to (excluding) 11.6

OR
     *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

http://seclists.org/fulldisclosure/2021/Sep/25 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/25 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/27 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/27 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/29 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/29 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/38 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/38 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/39 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/39 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/50 No Types Assigned

http://seclists.org/fulldisclosure/2021/Sep/50 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/09/20/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/09/20/1 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/26/9 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/26/9 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/27/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/27/1 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/27/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/27/2 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/27/4 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/10/27/4 Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/[email protected]/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/ No Types Assigned

https://lists.fedoraproject.org/archives/list/[email protected]/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/ Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/[email protected]/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/ No Types Assigned

https://lists.fedoraproject.org/archives/list/[email protected]/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/ Mailing List, Third Party Advisory

https://support.apple.com/kb/HT212824 No Types Assigned

https://support.apple.com/kb/HT212824 Third Party Advisory

https://www.debian.org/security/2021/dsa-4975 No Types Assigned

https://www.debian.org/security/2021/dsa-4975 Third Party Advisory

https://www.debian.org/security/2021/dsa-4976 No Types Assigned

https://www.debian.org/security/2021/dsa-4976 Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/27/4 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/27/2 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/27/1 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/10/26/9 [No Types Assigned]

https://lists.fedoraproject.org/archives/list/[email protected]/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/ [No Types Assigned]

http://seclists.org/fulldisclosure/2021/Sep/50 [No Types Assigned]

https://support.apple.com/kb/HT212824 [No Types Assigned]

https://www.debian.org/security/2021/dsa-4975 [No Types Assigned]

https://www.debian.org/security/2021/dsa-4976 [No Types Assigned]

http://seclists.org/fulldisclosure/2021/Sep/38 [No Types Assigned]

http://seclists.org/fulldisclosure/2021/Sep/39 [No Types Assigned]

https://lists.fedoraproject.org/archives/list/[email protected]/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/ [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/09/20/1 [No Types Assigned]

http://seclists.org/fulldisclosure/2021/Sep/25 [No Types Assigned]

http://seclists.org/fulldisclosure/2021/Sep/27 [No Types Assigned]

http://seclists.org/fulldisclosure/2021/Sep/29 [No Types Assigned]

NIST AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NIST (AV:N/AC:M/Au:N/C:P/I:P/A:P)

NIST CWE-416

OR
     *cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* versions up to (excluding) 14.8
     *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (excluding) 14.8
     *cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* versions up to (excluding) 11.6

https://support.apple.com/en-us/HT212804 No Types Assigned

https://support.apple.com/en-us/HT212804 Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT212807 No Types Assigned

https://support.apple.com/en-us/HT212807 Release Notes, Vendor Advisory

Victim must voluntarily interact with attack mechanism

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none.

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

https://support.apple.com/en-us/HT212804 [No Types Assigned]

https://support.apple.com/en-us/HT212807 [No Types Assigned]