by Kastro
Paper/Archive/CVE-2021-1864

CVE-2021-1864

Apple iOS and iPadOS — A use after free issue was addressed with improved memory management.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.2.822 × 2016.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.

Affected

ProductAffectedFixed inSource
iOS and iPadOSunspecified – < 14.514.5CNA
tvOSunspecified – < 14.514.5CNA
watchOSunspecified – < 7.47.4CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.apple.com/en-us/HT212317refsupport.apple.com/en-us/HT212323refsupport.apple.com/en-us/HT212324