EXPOSURES › CVE-2021-30762
CVE-2021-30762
HIGH ⌖ ON CISA KEV · EXPLOITEDApple iOS WebKit use-after-free flaw allows remote code execution via malicious web content.
A use-after-free vulnerability in Apple iOS WebKit enables attackers to execute arbitrary code when processing malicious web pages, impacting Safari and other WebKit-based browsers. DIB organizations must ensure all mobile devices are patched promptly, as this flaw was actively exploited in the wild and represents a significant compliance risk under NIST 800-171 for unpatched software.
Shame score — The flaw was actively exploited in the wild and led to remote code execution, indicating a failure to patch a known vulnerability before it was weaponized.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Apple iOS WebKit contains a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
"This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing."
"CISA's Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks."
"~$ curl https://cvedb.shodan.io/cve/CVE-2024-0204"
"Latest 30 CVEs - Real-Time Cyber Threats"
"Apple CVEs and Security Vulnerabilities - OpenCVE"