EXPOSURES › CVE-2021-30661
CVE-2021-30661
HIGH ⌖ ON CISA KEV · EXPLOITEDApple's WebKit use-after-free flaw in iOS/macOS Safari allowed remote code execution via malicious web content.
A use-after-free vulnerability in Apple's WebKit storage component enabled remote code execution when processing malicious web content, impacting iOS, iPadOS, macOS, tvOS, watchOS, and Safari. DIB organizations must ensure all Apple devices and WebKit-dependent systems are patched promptly, as this flaw was actively exploited in the wild and linked to ransomware campaigns. Failure to patch exposes critical endpoints to arbitrary code execution, violating CMMC/NIST 800-171 requirements for timely vulnerability management.
Shame score — A critical use-after-free flaw in a widely deployed WebKit component was actively exploited in the wild and linked to ransomware, demonstrating severe negligence in patching a known, high-impact vulnerability.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
"CISA Adds Three Known Exploited Vulnerabilities to Catalog"
"This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing."
"CISA's Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks."