Exploit / PoCcriticalExploited in the wild

Apple addresses three zero

Security Affairsby @securityaffairsMay 4, 2021 · 06:53 UTC (May 4, 2021)1 min read3

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-30663 CVE-2021-30665 CVE-2021-30666 CVE-2021-30661

Tags: cve-2021-30663 cve-2021-30665 cve-2021-30666 cve-2021-30661 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-30661 +2 related CVEs CVE-2021-30665 CVE-2021-30663	Use-After-Free in Apple WebKit Enables Code Execution via Malicious Web Content	8.8	4%	KEV	Sep 8, 2021 KEV Nov 3, 2021
CVE-2021-30666	WebKit Buffer Overflow in Apple iOS Allows Code Execution via Malicious Web Content	8.8	3%	KEV	Sep 8, 2021 KEV Nov 3, 2021

From the original article

1 min read at securityaffairs.com

Apple has released security updates to patch three zero-days in the WebKit, the Apple’s browser engine, and fixed a zero-day exploited in the wild. Apple released security updates to address four zero-day vulnerabilities impacting WebKit, which is used by multiple products of the IT giant, including iPadOS, tvOS, and watchOS. The WebKit browser engine is used by multiple products to display web content.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.