Vulnerabilities > CVE-2021-1864 - Use After Free vulnerability in Apple products

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
apple
CWE-416
critical
NVD
Published: 2021-09-08
Updated: 2021-09-16

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.

Vulnerable Configurations

Part Description Count
OS
Apple
390

Common Weakness Enumeration (CWE)

References