CVE-2021-30954

ÉLEVÉE 7.8CVE-2021-30954 · Published 24/08/2021 · updated 17/06/2026

En bref

CVE-2021-30954 est une vulnérabilité ÉLEVÉE (CVSS 7.8) touchant safari (apple).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.5%, plus élevée que 73.4% des vulnérabilités.
Correctif : mettre à jour vers 15.2 ou plus récent.

Package	Affected versions	Patched versions
safari apple	`< 15.2`	`15.2`

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References

openwall.com/lists/oss-security/2022/01/21/2
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V
support.apple.com/en-us/HT212975
support.apple.com/en-us/HT212976
support.apple.com/en-us/HT212978
support.apple.com/en-us/HT212980
support.apple.com/en-us/HT212982
debian.org/security/2022/dsa-5060
debian.org/security/2022/dsa-5061

Autres vulnérabilités de safari

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 15.2

15.2

Autres vulnérabilités de safari

Tout voir →