{"id":"CVE-2021-1864","aliases":["EUVD-2021-7328","GHSA-cmxj-r24c-gf8p"],"status":"published","title":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS...","description":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02155,"percentile":0.82432,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-416"],"published":"2021-09-08T14:48:35Z","modified":"2026-06-17T03:32:41Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/HT212317","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT212323","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT212324","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1864"},{"url":"https://github.com/advisories/GHSA-cmxj-r24c-gf8p"}],"sources":{"cve":[{"id":"CVE-2021-1864","description":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.","status":"published","published":"2021-09-08T14:48:35Z","modified":"2024-08-03T16:25:05.892Z","updated_at":"2026-11-02T14:33:08.409321Z"}],"euvd":[{"id":"EUVD-2021-7328","description":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.","status":"published","published":"2021-09-08T14:48:35Z","modified":"2024-08-03T16:25:05Z","updated_at":"2026-11-03T03:25:14.678157Z"}],"ghsa":[{"id":"GHSA-cmxj-r24c-gf8p","title":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS...","description":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.","status":"published","published":"2022-05-24T19:13:33Z","modified":"2023-01-30T05:01:53Z","cwes":["CWE-416"],"updated_at":"2026-11-02T14:46:30.744651Z"}],"nvd":[{"id":"CVE-2021-1864","description":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.","status":"published","published":"2021-09-08T15:15:11.81Z","modified":"2026-06-17T03:32:41.243Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:58.05696Z"}]}}