CVE-2021-30952VulnerabilityPublished 03/05/2026Updated 10/24/2026
CVE-2021-30952: Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Affects Apple Multiple ProductsSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/05/2026
- KEV deadline
- 03/26/2026
- EPSS
- 7.0% chance of exploitation in 30 days – higher than 94% of CVEs
What to do
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- support.apple.com/en-us/HT212975 (opens in a new tab)
- support.apple.com/en-us/HT212976 (opens in a new tab)
- support.apple.com/en-us/HT212978 (opens in a new tab)
- support.apple.com/en-us/HT212980 (opens in a new tab)
- support.apple.com/en-us/HT212982 (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2021-30952 (opens in a new tab)
Description
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.
Weaknesses
References
- support.apple.com/en-us/HT212975 (opens in a new tab)
- support.apple.com/en-us/HT212976 (opens in a new tab)
- support.apple.com/en-us/HT212978 (opens in a new tab)
- support.apple.com/en-us/HT212980 (opens in a new tab)
- support.apple.com/en-us/HT212982 (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2021-30952 (opens in a new tab)
- cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2021-30952 (opens in a new tab)