CVE-2021-1844

—

CVSS 3.1

8.8 high

EPSS

2%p83

Published

Apr 2, 2021 (Apr 2, 2021)

Modified

Jun 17, 2026

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendors: apple debian fedoraproject
Products: safari, ipados, iphone os, macos, tvos, watchos, debian linux, fedora
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news6 stories

Google: Three recent zero-days have been used against Armenian targets

The RecordDec 13, 00:00 UTC · Dec 13, 2022Exploit / PoC CVE-2021-21166 CVE-2021-30551 CVE-2021-33742+2 CVEs

March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-day

Help Net SecurityJun 8, 18:28 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-26411 CVE-2021-27076 CVE-2021-26867+1 CVEs

CVE-2021-1844

In the news6 stories

Google: Three recent zero-days have been used against Armenian targets

March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-day

Apple released out-of-band updates for a new Zero‑Day actively exploited

Apple Issues Urgent Patch Update for Another Zero‑Day Under Attack

Apple fixes CVE-2021-1844 RCE that affects iOS, macOS, watchOS, and Safari

Apple Issues Patch for Remote Hacking Bug Affecting Billions of its Devices