{"id":"CVE-2021-30770","aliases":["EUVD-2021-17687","GHSA-qw3m-7664-26j4"],"status":"published","title":"A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7,...","description":"A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00366,"percentile":0.30923,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2021-09-08T13:46:45Z","modified":"2026-06-17T03:50:51Z","products":[{"vendor":"apple","product":"ios"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"},{"vendor":"cisco","product":"ios"}],"references":[{"url":"https://support.apple.com/en-us/HT212601","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT212605","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT212604","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30770"},{"url":"https://github.com/advisories/GHSA-qw3m-7664-26j4"}],"sources":{"cve":[{"id":"CVE-2021-30770","description":"A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.","status":"published","published":"2021-09-08T13:46:45Z","modified":"2024-08-03T22:40:32.18Z","updated_at":"2026-11-02T14:33:02.20241Z"}],"euvd":[{"id":"EUVD-2021-17687","description":"A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.","status":"published","published":"2021-09-08T13:46:45Z","modified":"2024-08-03T22:40:32Z","updated_at":"2026-11-03T03:24:41.017854Z"}],"ghsa":[{"id":"GHSA-qw3m-7664-26j4","title":"A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7,...","description":"A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.","status":"published","published":"2022-05-24T19:13:44Z","modified":"2023-01-30T05:01:58Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:46:31.662536Z"}],"nvd":[{"id":"CVE-2021-30770","description":"A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.","status":"published","published":"2021-09-08T14:15:10.627Z","modified":"2026-06-17T03:50:51.903Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:C/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:06:58.05696Z"}]}}
