CVE-2021-30758
First published: Mon Jul 19 2021(Updated: )
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Credit: Christoph Guttandin Media CodingsChristoph Guttandin Media CodingsChristoph Guttandin Media CodingsChristoph Guttandin Media Codings product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/webkit2gtk | 2.36.4-1~deb10u1 2.38.6-0+deb10u1 2.40.5-1~deb11u1 2.42.1-1~deb11u2 2.40.5-1~deb12u1 2.42.1-1~deb12u1 2.42.1-2 | |
| debian/wpewebkit | 2.38.6-1~deb11u1 2.38.6-1 2.42.1-1 | |
| Apple Safari | <14.1.2 | |
| Apple iPhone OS | <14.7 | |
| Apple macOS | <11.5 | |
| Apple tvOS | <14.7 | |
| Apple watchOS | <7.6 | |
| Apple watchOS | <7.6 | 7.6 |
| Apple macOS Big Sur | <11.5 | 11.5 |
| Apple tvOS | <14.7 | 14.7 |
| Apple Safari | <14.1.2 | 14.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212602 (Advisory)
- https://support.apple.com/en-us/HT212604 (Advisory)
- https://support.apple.com/en-us/HT212605 (Advisory)
- https://support.apple.com/en-us/HT212606 (Advisory)
- https://support.apple.com/en-us/HT212601
- https://webkitgtk.org/security/WSA-2021-0004.html
- https://security-tracker.debian.org/tracker/CVE-2021-30758
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30758
- CVE-2021-30795
- CVE-2021-30797
- CVE-2021-30805
- CVE-2021-30871
- CVE-2021-30790
- CVE-2021-31006
- CVE-2021-30781
- CVE-2021-30748
- CVE-2021-30775
- CVE-2021-30776
- CVE-2021-30786
- CVE-2021-30772
- CVE-2021-30783
- CVE-2021-30777
- CVE-2021-30789
- CVE-2021-30774
- CVE-2021-30780
- CVE-2021-30768
- CVE-2021-30817
- CVE-2021-30804
- CVE-2021-30760
- CVE-2021-30788
- CVE-2021-30759
- CVE-2021-30803
- CVE-2021-30779
- CVE-2021-30785
- CVE-2021-30787
- CVE-2021-30766
- CVE-2021-30765
- CVE-2021-30784
- CVE-2021-30793
- CVE-2021-30778
- CVE-2021-30677
- CVE-2021-3518
- CVE-2021-30796
- CVE-2021-30792
- CVE-2021-30791
- CVE-2021-1821
- CVE-2021-30782
- CVE-2021-31004
- CVE-2021-30798
- CVE-2021-30799
- CVE-2021-30763
- CVE-2021-30773
- CVE-2021-30769
- CVE-2021-30770
- CVE-2021-30802
Frequently Asked Questions
What is CVE-2021-30758?
CVE-2021-30758 is a type confusion issue in WebKit that has been addressed with improved state handling.
Which software is affected by CVE-2021-30758?
The following software is affected by CVE-2021-30758: macOS Big Sur (up to version 11.5), Safari (up to version 14.1.2), watchOS (up to version 7.6), and tvOS (up to version 14.7).
How can I fix the CVE-2021-30758 vulnerability?
To fix the CVE-2021-30758 vulnerability, you should update your affected software to the latest available version. Please refer to the vendor's official support page for more information.
Where can I find more information about CVE-2021-30758?
You can find more information about CVE-2021-30758 on Apple's support page at the following URLs: [support.apple.com/en-us/HT212605](https://support.apple.com/en-us/HT212605), [support.apple.com/en-us/HT212604](https://support.apple.com/en-us/HT212604), [support.apple.com/en-us/HT212602](https://support.apple.com/en-us/HT212602).
Is CVE-2021-30758 a critical vulnerability?
The severity of CVE-2021-30758 has not been mentioned. Please refer to the vendor's official support page or security advisories for more information.
- collector/security-tracker-debian
- collector/apple-support
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/software-canonical-lookup-request
- agent/tags
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- package-manager/debian
- vendor/apple
- canonical/apple safari
- canonical/apple macos big sur
- canonical/apple watchos
- canonical/apple iphone os
- canonical/apple macos
- canonical/apple tvos