Apple iOS, iPadOS, and macOS Type Confusion Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2021-30869 · Published 24/08/2021 · updated 17/06/2026

Apple iOS, iPadOS, and macOS Type Confusion Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
iOS, iPadOS, and macOS Apple	Versions not published yet (product named by CISA KEV)

Description

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.

References

support.apple.com/en-us/HT212146 · Vendor Advisory
support.apple.com/en-us/HT212147 · Vendor Advisory
support.apple.com/en-us/HT212824 · Vendor Advisory
support.apple.com/en-us/HT212825 · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2021-30869

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free