CVE-2021-30900VulnerabilityPublished 03/30/2023Updated 10/24/2026
CVE-2021-30900: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
Affects Apple iOS, iPadOS, and macOSSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/30/2023
- KEV deadline
- 04/20/2023
- EPSS
- 5.2% chance of exploitation in 30 days – higher than 92% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.
Weaknesses
References
- support.apple.com/en-us/HT21286, (opens in a new tab)
- support.apple.com/en-us/HT212868, (opens in a new tab)
- support.apple.com/kb/HT212872 (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2021-30900 (opens in a new tab)
- cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2021-30900 (opens in a new tab)