Apple · iOS, iPadOS, and macOS
CVE-2021-1871
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Qué es
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CISA: Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Qué hacer
Apply updates per vendor instructions.
Plazo para las agencias federales de EE. UU.: 17 de noviembre de 2021
Más fallos explotados de Apple
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 21 ago 2025 | Out-of-Bounds Write | iOS, iPadOS, and macOS | Crítica 10,0 | 65% |
| 11 sept 2023 | ImageIO Buffer Overflow | iOS, iPadOS, and macOS | Alto 7,8 | 53% |
| 10 abr 2023 | IOSurfaceAccelerator Out-of-Bounds Write | iOS, iPadOS, and macOS | Alto 8,6 | 23% |
| 30 mar 2023 | Out-of-Bounds Write | iOS, iPadOS, and macOS | Alto 7,8 | 5,2% |
| 14 sept 2022 | Remote Code Execution | iOS, iPadOS, and macOS | Alto 7,8 | 5,6% |
| 8 sept 2022 | Input Validation | iOS, iPadOS, and macOS | Media 5,5 | 3,2% |
| 11 feb 2022 | Webkit Use-After-Free | iOS, iPadOS, and macOS | Alto 8,8 | 16% |
| 3 nov 2021 | WebKit Remote Code Execution | iOS, iPadOS, and macOS | Crítica 9,8 | 7,7% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.