CVE-2021-1789

A type confusion vulnerability in multiple Apple products allowed arbitrary code execution via malicious web content.

This type confusion flaw enabled remote code execution when users processed malicious web content, directly impacting DIB organizations relying on Apple devices for secure operations. The vulnerability was actively exploited in the wild, highlighting the risk of unpatched or delayed patches on widely deployed hardware. DIB orgs must ensure timely patching and consider compensating controls for devices that cannot be immediately updated.

Shame score — A type confusion vulnerability in widely deployed Apple products was actively exploited in the wild, demonstrating a significant gap between patch availability and real-world exploitation that DIB organizations must account for in their risk assessments.