Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-30631 State: REJECTED Published: 2021-11-02T20:55:12 Last Updated: 2021-11-02T20:55:12 Description: No description available.
CVE ID: CVE-2021-30632 State: PUBLISHED Published: 2021-10-08T00:00:00.000Z Last Updated: 2025-10-21T23:25:29.990Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html - https://crbug.com/1247763 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lis
ect.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - http://packetstormsecurity.com/files/172845/Chrome-JIT-Compiler-Type-Confusion.html
CVE ID: CVE-2021-30633 State: PUBLISHED Published: 2021-10-08T20:50:29.000Z Last Updated: 2025-10-21T23:25:29.633Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html - https://crbug.com/1247766 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DD
crbug.com/1247766 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/
CVE ID: CVE-2021-30635 State: PUBLISHED Published: 2021-04-27T02:52:06 Last Updated: 2024-08-03T22:40:31.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no customer-specific data is exposed). Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com/hc/en-us/articles/1500006879561
CVE ID: CVE-2021-30636 State: PUBLISHED Published: 2022-01-24T00:27:41 Last Updated: 2024-08-03T22:40:31.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
CVE ID: CVE-2021-30637 State: PUBLISHED Published: 2021-04-13T04:58:14 Last Updated: 2024-08-03T22:40:31.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/danpros/htmly/issues/456 - http://packetstormsecurity.com/files/162195/htmly-2.8.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-30638 State: PUBLISHED Published: 2021-04-27T18:30:15 Last Updated: 2024-08-03T22:40:31.642Z Vendors: Apache Software Foundation Products: Apache Tapestry Problem Types: CWE-200 Description: Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r37dab61fc7f708
1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb%40%3Cusers.tapestry.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/04/27/3 - https://www.zerodayinitiative.com/advisories/ZDI-21-491/ - https://security.netapp.com/advisory/ntap-20210528-0004/
CVE ID: CVE-2021-30639 State: PUBLISHED Published: 2021-07-12T14:55:12 Last Updated: 2024-08-03T22:40:31.655Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Denial of Service Description: A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future requests handled by that request object would fail. Users were able to trigger non-blocking I/O errors, e.g. by dropping a connection, thereb
hat request object would fail. Users were able to trigger non-blocking I/O errors, e.g. by dropping a connection, thereby creating the possibility of triggering a DoS. Applications that do not use non-blocking I/O are not exposed to this vulnerability. This issue affects Apache Tomcat 10.0.3 to 10.0.4; 9.0.44; 8.5.64. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/rd84fae1f474597bdf358f5bdc0a5c453c507bd527b83e8be6b5ea3f4%40%3Cannounce.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r79a7c019712b39aedf7cf4da9276d80610f04441b2a4f6506cb2daaf%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r79a7c019712b39ae
276d80610f04441b2a4f6506cb2daaf%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r79a7c019712b39aedf7cf4da9276d80610f04441b2a4f6506cb2daaf%40%3Cdev.tomcat.apache.org%3E - https://security.netapp.com/advisory/ntap-20210827-0007/ - https://kc.mcafee.com/corporate/index?page=content&id=SB10366 - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.gentoo.org/glsa/202208-34
CVE ID: CVE-2021-30640 State: PUBLISHED Published: 2021-07-12T14:55:13 Last Updated: 2024-08-03T22:40:31.832Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Authentication weaknees Description: A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r59f9ef03929d32120f91f4ea7e6e79edd5688d75d0a9b65fd26d1fe8%40%3Cannounce.tomcat.apache.org%
/lists.apache.org/thread.html/r59f9ef03929d32120f91f4ea7e6e79edd5688d75d0a9b65fd26d1fe8%40%3Cannounce.tomcat.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://lists.debian.org/debian-lts-announce/2021/08/msg00009.html - https://www.debian.org/security/2021/dsa-4952 - https://www.debian.org/security/2021/dsa-4986 - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210827-0007/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.gentoo.org/glsa/202208-34
CVE ID: CVE-2021-30641 State: PUBLISHED Published: 2021-06-10T07:10:24 Last Updated: 2024-08-03T22:40:31.820Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: Unexpected URL matching with 'MergeSlashes OFF' Description: Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF' Additional Analyst Notes: - CVE Program Container: References: - http://httpd.apache.org/security/vulnerabilities_24.html - https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2b4773944d83d2799de9fbaeee7fe0f3fd72669467787e02f434cb10%40%3Ca
pd.apache.org%3E - https://lists.apache.org/thread.html/r2b4773944d83d2799de9fbaeee7fe0f3fd72669467787e02f434cb10%40%3Cannounce.httpd.apache.org%3E - https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/06/10/8 - https://lists.debian.org/debian-lts-announce/2021/07/msg00006.html - https://www.debian.org/security/2021/dsa-4937 - https://security.gentoo.org/glsa/202107-38 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.
.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210702-0001/
CVE ID: CVE-2021-30642 State: PUBLISHED Published: 2021-04-27T14:49:37 Last Updated: 2024-08-03T22:40:31.944Z Vendors: n/a Products: Symantec Security Analytics Problem Types: OS command injection Description: An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA17969
CVE ID: CVE-2021-30648 State: PUBLISHED Published: 2021-06-30T10:40:39 Last Updated: 2024-08-03T22:40:31.611Z Vendors: n/a Products: Advanced Secure Gateway (ASG) and ProxySG Problem Types: Authentication bypass Description: The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA18331
CVE ID: CVE-2021-30650 State: PUBLISHED Published: 2022-02-18T17:50:58 Last Updated: 2024-08-03T22:40:31.587Z Vendors: n/a Products: Layer7 API Management OAuth Toolkit (OTK) Problem Types: Cross-site scripting (XSS) Description: A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious code into the OTK web UI client application. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-conte
ion. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/CVE-2021-30650-Layer7-OAuth-Toolkit-OTK-/20170
CVE ID: CVE-2021-30651 State: PUBLISHED Published: 2022-06-24T15:00:11 Last Updated: 2024-08-03T22:40:31.654Z Vendors: n/a Products: Symantec Messaging Gateway (SMG) Problem Types: Information disclosure Description: A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/external/content/SecurityAdvisories/0/20652
CVE ID: CVE-2021-30652 State: PUBLISHED Published: 2021-09-08T14:48:05 Last Updated: 2024-08-03T22:40:31.684Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: A malicious application may be able to gain root privileges Description: A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://
Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://support.apple.com/en-us/HT212325 - https://support.apple.com/en-us/HT212326 - https://support.apple.com/en-us/HT212327
CVE ID: CVE-2021-30653 State: PUBLISHED Published: 2021-09-08T14:48:25 Last Updated: 2024-08-03T22:40:31.587Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://suppo
com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://support.apple.com/en-us/HT212325
CVE ID: CVE-2021-30654 State: PUBLISHED Published: 2021-09-08T14:47:18 Last Updated: 2024-08-03T22:40:31.895Z Vendors: Apple Products: GarageBand Problem Types: A local attacker may be able to read sensitive information Description: This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212299
CVE ID: CVE-2021-30655 State: PUBLISHED Published: 2021-09-08T14:47:09 Last Updated: 2024-08-03T22:40:31.699Z Vendors: Apple Products: macOS Problem Types: The issue was addressed with improved permissions logic Description: An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. The issue was addressed with improved permissions logic. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212325 - https://support.apple.com/en-us/HT212326
CVE ID: CVE-2021-30656 State: PUBLISHED Published: 2021-09-08T14:48:41 Last Updated: 2024-08-03T22:40:31.921Z Vendors: Apple Products: iOS and iPadOS Problem Types: A malicious application may be able to determine kernel memory layout Description: An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317
CVE ID: CVE-2021-30657 State: PUBLISHED Published: 2021-09-08T14:49:34.000Z Last Updated: 2025-10-21T23:25:34.280Z Vendors: Apple Products: macOS Problem Types: A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited. Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT2
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT212325 - https://support.apple.com/en-us/HT212326
CVE ID: CVE-2021-30658 State: PUBLISHED Published: 2021-09-08T14:48:11 Last Updated: 2024-08-03T22:40:31.843Z Vendors: Apple Products: macOS Problem Types: A malicious application may bypass Gatekeeper checks Description: This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Big Sur 11.3. A malicious application may bypass Gatekeeper checks. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212325
CVE ID: CVE-2021-30659 State: PUBLISHED Published: 2021-09-08T14:51:00 Last Updated: 2024-08-03T22:40:31.884Z Vendors: Apple Products: iOS and iPadOS, watchOS, macOS Problem Types: A malicious application may be able to leak sensitive user information Description: A validation issue was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. A malicious application may be able to leak sensitive user information. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212324 - https://support.apple.com/en-us/HT212325
CVE ID: CVE-2021-30660 State: PUBLISHED Published: 2021-09-08T14:48:00 Last Updated: 2024-08-03T22:40:31.982Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: A malicious application may be able to disclose kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to disclose kernel memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://support.apple
s/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://support.apple.com/en-us/HT212325
CVE ID: CVE-2021-30661 State: PUBLISHED Published: 2021-09-08T14:48:29.000Z Last Updated: 2025-10-21T23:25:34.470Z Vendors: Apple Products: iOS and iPadOS, Safari, tvOS, watchOS, macOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been act
y crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://support.apple.com/en-us/HT212325 - https://support.apple.com/en-us/HT212341 - https://support.apple.com/en-us/HT212318
CVE ID: CVE-2021-30662 State: PUBLISHED Published: 2021-09-08T14:46:47 Last Updated: 2024-08-03T22:40:31.670Z Vendors: Apple Products: iOS and iPadOS Problem Types: Processing a maliciously crafted file may lead to arbitrary code execution Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317
CVE ID: CVE-2021-30663 State: PUBLISHED Published: 2021-09-08T14:49:41.000Z Last Updated: 2025-10-21T23:25:34.065Z Vendors: Apple Products: macOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution Description: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT212532 - https://support.apple.com/en-us/HT212534 - https://su
richment: References: - https://support.apple.com/en-us/HT212532 - https://support.apple.com/en-us/HT212534 - https://support.apple.com/en-us/HT212341 - https://support.apple.com/en-us/HT212335 - https://support.apple.com/en-us/HT212336
CVE ID: CVE-2021-30664 State: PUBLISHED Published: 2021-09-08T14:32:34 Last Updated: 2024-08-03T22:40:31.655Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted file may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us
- https://support.apple.com/en-us/HT212317 - https://support.apple.com/en-us/HT212323 - https://support.apple.com/en-us/HT212324 - https://support.apple.com/en-us/HT212325
CVE ID: CVE-2021-30665 State: PUBLISHED Published: 2021-09-08T14:25:00.000Z Last Updated: 2025-10-21T23:25:34.957Z Vendors: Apple Products: macOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. Additional Analyst Notes
y code execution. Apple is aware of a report that this issue may have been actively exploited.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT212532 - https://support.apple.com/en-us/HT212341 - https://support.apple.com/en-us/HT212335 - https://support.apple.com/en-us/HT212336 - https://support.apple.com/en-us/HT212339
CVE ID: CVE-2021-30666 State: PUBLISHED Published: 2021-09-08T14:25:25.000Z Last Updated: 2025-10-21T23:25:34.810Z Vendors: Apple Products: iOS Problem Types: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.a
exploited.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT212341