CVE-2021-30900

CVE Database · CVE-2021-30900

CVE-2021-30900

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

5.20%

Published

Aug 24, 2021

Modified

Oct 23, 2025

CISA Known Exploited Vulnerability

Added: 2023-03-30 · Due: 2023-04-20

Apply updates per vendor instructions.

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787CWE-787

Affected Products (5)

apple · ipados (up to 14.8.1)vulnerable

apple · ipadosvulnerable

apple · iphone_os (up to 14.8.1)vulnerable

apple · iphone_osvulnerable

apple · macos (up to 11.6.1)vulnerable

References (7)

https://support.apple.com/en-us/HT212867

Vendor Advisory

https://support.apple.com/en-us/HT212868

Vendor Advisory

https://support.apple.com/kb/HT212872

Vendor Advisory

https://support.apple.com/en-us/HT212867

Vendor Advisory

https://support.apple.com/en-us/HT212868

Vendor Advisory

https://support.apple.com/kb/HT212872

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30900

US Government Resource

KEV Catalog EPSS Scores Vendors All CVEs