CVE-2021-30860

CVE-2021-30860 is a high-severity (CVSS 7.8) vulnerability in Apple Multiple Products. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by November 17, 2021. CISA does not currently list it as used in ransomware campaigns. Apple has 96 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

• http://seclists.org/fulldisclosure/2021/Sep/25
• http://seclists.org/fulldisclosure/2021/Sep/26
• http://seclists.org/fulldisclosure/2021/Sep/27
• http://seclists.org/fulldisclosure/2021/Sep/28
• http://seclists.org/fulldisclosure/2021/Sep/38
• http://seclists.org/fulldisclosure/2021/Sep/39
• http://seclists.org/fulldisclosure/2021/Sep/40
• http://seclists.org/fulldisclosure/2021/Sep/50