VulnRadar

Data against noise.

Built with NaN
Page generated: 11 Nov 2026, 07:18 UTC
← Dashboard

CVE-2021-30869

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may b…

Read full description
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.
CVSS 7.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.2/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 7.8: +1.17
  • Fresh EPSS: 4.17%: +0.02

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 12 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

SECURITY.COM
Press · 23 Jul 2024, 07:00 · Daggerfly: Espionage Group Makes Major Update to Toolset - SECURITY.COM
Qualys
Press · 19 Dec 2022, 08:00 · NSO Pegasus iPhone Spyware Vulnerabilities Fixed by Apple - Detect & Prioritize Using VMDR for Mobile Devices - Qualys
Macworld
Press · 26 Jan 2022, 08:00 · Patched Mac malware sheds light on scary backdoor for hackers - Macworld
Malwarebytes
Press · 26 Jan 2022, 08:00 · New DazzleSpy malware attacks macOS - Malwarebytes
Malwarebytes
Press · 16 Nov 2021, 08:00 · New Mac malware raises more questions about Apple’s security patching - Malwarebytes
See all 12 source documents
Cybernews
Press · 12 Nov 2021, 08:00 · Hackers use macOS zero-day flaw to capture victims’ data - Google - Cybernews
blog.google
Press · 11 Nov 2021, 08:00 · Analyzing a watering hole campaign using macOS exploits - blog.google
The Hacker News
Press · 12 Oct 2021, 07:00 · Apple Releases Urgent iPhone and iPad Updates to Patch New Zero-Day Vulnerability - The Hacker News
The Record from Recorded Future News
Press · 10 Oct 2021, 07:00 · Apple patches iPhone zero-day in iOS 15.0.2 - The Record from Recorded Future News
The Hacker News
Press · 25 Sep 2021, 07:00 · Urgent Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability - The Hacker News
Macworld
Press · 23 Sep 2021, 07:00 · No iOS 15, no problem: Apple releases iOS 12.5.5 security update - Macworld
9to5Mac
Press · 23 Sep 2021, 07:00 · Apple releases iOS 12.5.5 for older iPhones and iPads with ‘important security updates’ - 9to5Mac

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.2 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 7.8; EPSS 4.2%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
local access, no prior privileges, user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:26.907878+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
24 Aug 2021, 18:49
First press mention
23 Sep 2021, 07:00
Added to the CISA KEV catalog
03 Nov 2021, 00:00
Latest press mention
23 Jul 2024, 07:00
Score calculated
05 Nov 2026, 13:58
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar