CVE-2021-30952: high-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in how Safari and Apple devices process web content allows an attacker to cause an integer overflow—a math error that overflows a number limit—which can be exploited to run malicious code on your device.
An integer overflow vulnerability in Safari's web content processing allows remote code execution when a user visits a malicious website. The vulnerability requires no user interaction beyond viewing crafted content, and successful exploitation results in arbitrary code execution with the privileges of the Safari process.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.