CVE-2021-30953

HIGH 8.8CVE-2021-30953 · Published 24/08/2021 · updated 17/06/2026

In short

CVE-2021-30953 is a HIGH (CVSS 8.8) vulnerability affecting safari (apple).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.3% of all vulnerabilities.
Fix: update to 15.2 or later.

Package	Affected versions	Patched versions
safari apple	`< 15.2`	`15.2`

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References

openwall.com/lists/oss-security/2022/01/21/2
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V
support.apple.com/en-us/HT212975
support.apple.com/en-us/HT212976
support.apple.com/en-us/HT212978
support.apple.com/en-us/HT212980
support.apple.com/en-us/HT212982
debian.org/security/2022/dsa-5060
debian.org/security/2022/dsa-5061

More vulnerabilities in safari

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free