ZeroDay Findings
Sign inSign up

Findings

CVE-2021-1789

Apple Multiple Products Type Confusion Vulnerability

Published Apr 2, 2021 · updated Jun 16, 2026 · apple ipados

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 2, 2021 · Catalog

    Detected

    A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

  2. May 4, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 25, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Required action

Apply updates per vendor instructions.

CISA due date May 25, 2022

Affected

  • cpe apple/ipadosversion unspecified
  • cpe apple/iphone osversion unspecified
  • cpe apple/mac os xversion unspecified
  • cpe apple/mac os x10.14.6
  • cpe fedoraproject/fedora32
  • cpe webkitgtk/webkitgtkversion unspecified
  • vendor Apple Multiple Productsversion unspecified

Sources

  • CISA KEVCVE-2021-1789

    A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.

    cisa.gov
  • CVE.orgCVE-2021-1789

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2021-1789

    30-day exploitation probability 14.0%

    first.org
  • NIST NVDCVE-2021-1789

    A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web co

    nvd.nist.gov

References

CVE-2021-1789 · ZeroDay Findings