Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.

Related CPE's

a

apple

safari

Vulnerable

o

apple

iphone_os

Vulnerable

o

apple

macos

Vulnerable

o

apple

tvos

Vulnerable

o

apple

watchos

Vulnerable

References

https://support.apple.com/en-us/HT212601

Vendor Advisory

https://support.apple.com/en-us/HT212602

Vendor Advisory

https://support.apple.com/en-us/HT212604

Vendor Advisory

https://support.apple.com/en-us/HT212605

Vendor Advisory

https://support.apple.com/en-us/HT212606

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-416

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-09-08T14:15:11.613

3 years ago

Last modified

2021-09-16T14:10:04.467

3 years ago