CVE-2021-30761

Timeline

Detection, updates, and resolution for this record.

1. Sep 8, 2021 · Catalog

   Detected

   Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Nov 17, 2021 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Affected

• cpe apple/iphone osversion unspecified
• vendor Apple iOSversion unspecified

Sources

• CISA KEVCVE-2021-30761

  Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  cisa.gov
• CVE.orgCVE-2021-30761

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2021-30761

  30-day exploitation probability 10.5%

  first.org
• NIST NVDCVE-2021-30761

  A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Release Notes · support.apple.com
• Third Party Advisory · cisa.gov