CVE entry · CVE-2021-30952
CVE-2021-30952: Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.
- Actively exploited: added to CISA’s KEV catalog on March 5, 2026.
- Use by ransomware: not established so far.
- Remediation deadline for US federal agencies: March 26, 2026.
Description from CISA’s KEV catalog.
What to do
- Check whether your estate includes affected Apple products, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- Vendor advisory or reference cited by CISA (support.apple.com)
- NVD entry (NIST)
- CISA KEV catalog
Other Apple vulnerabilities
-
Apple Multiple Products Out-of-Bounds Write Vulnerability
-
Apple macOS Improper Authentication Vulnerability
-
Apple Multiple Products Classic Buffer Overflow Vulnerability
-
Apple Multiple Products Improper Locking Vulnerability
-
Apple Multiple Products Buffer Overflow Vulnerability
-
Apple Multiple products Use-After-Free Vulnerability