Apple iOS and iPadOS: A local attacker may be able to read sensitive information
Priority LOW 25Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker may be able to read sensitive information.
Why it matters now
EPSS 0.00303 23rd percentileScored 2026-11-07
Fix Fixed iOS and iPadOS (Apple): 15watchOS (Apple): 8
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Apple | iOS and iPadOS | before 15 | 15 | Patch available | CNA |
| Apple | watchOS | before 8 | 8 | Patch available | CNA |
- iOS and iPadOS VendorApple Affected before 15 Fixed in 15 Patch available CNA
- watchOS VendorApple Affected before 8 Fixed in 8 Patch available CNA
CPE configurations NVD · 34
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | before 15.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | before 15.0 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | 10.14.0 to before 10.14.6; 10.15 to before 10.15.7 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:* | 10.14.6 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:* | 10.14.6 security_update_2019-001 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:* | 10.14.6 security_update_2019-002 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:* | 10.14.6 security_update_2019-004 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:* | 10.14.6 security_update_2019-005 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:* | 10.14.6 security_update_2019-006 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:* | 10.14.6 security_update_2019-007 | Vulnerable | Apple |
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* Versions before 15.0 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions before 15.0 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions 10.14.0 to before 10.14.6; 10.15 to before 10.15.7 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:* Versions 10.14.6 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:* Versions 10.14.6 security_update_2019-001 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:* Versions 10.14.6 security_update_2019-002 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:* Versions 10.14.6 security_update_2019-004 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:* Versions 10.14.6 security_update_2019-005 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:* Versions 10.14.6 security_update_2019-006 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:* Versions 10.14.6 security_update_2019-007 Vulnerable ·Apple
Show 24 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:* | 10.14.6 security_update_2020-001 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:* | 10.14.6 security_update_2020-002 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:* | 10.14.6 security_update_2020-003 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:* | 10.14.6 security_update_2020-004 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:* | 10.14.6 security_update_2020-005 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:* | 10.14.6 security_update_2020-006 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:* | 10.14.6 security_update_2020-007 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:* | 10.14.6 security_update_2021-001 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:* | 10.14.6 security_update_2021-002 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-003:*:*:*:*:*:* | 10.14.6 security_update_2021-003 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-004:*:*:*:*:*:* | 10.14.6 security_update_2021-004 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:* | 10.14.6 supplemental_update | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:* | 10.14.6 supplemental_update_2 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:* | 10.15.7 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:* | 10.15.7 security_update_2020 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:* | 10.15.7 security_update_2020-001 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:* | 10.15.7 security_update_2020-005 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:* | 10.15.7 security_update_2020-007 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:* | 10.15.7 security_update_2021-001 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:* | 10.15.7 security_update_2021-002 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:* | 10.15.7 security_update_2021-003 | Vulnerable | Apple |
| cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:* | 10.15.7 supplemental_update | Vulnerable | Apple |
| cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | before 11.6 | Vulnerable | Apple |
| cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* | before 8.0 | Vulnerable | Apple |
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:* Versions 10.14.6 security_update_2020-001 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:* Versions 10.14.6 security_update_2020-002 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:* Versions 10.14.6 security_update_2020-003 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:* Versions 10.14.6 security_update_2020-004 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:* Versions 10.14.6 security_update_2020-005 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:* Versions 10.14.6 security_update_2020-006 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:* Versions 10.14.6 security_update_2020-007 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:* Versions 10.14.6 security_update_2021-001 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:* Versions 10.14.6 security_update_2021-002 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-003:*:*:*:*:*:* Versions 10.14.6 security_update_2021-003 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-004:*:*:*:*:*:* Versions 10.14.6 security_update_2021-004 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:* Versions 10.14.6 supplemental_update Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:* Versions 10.14.6 supplemental_update_2 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:* Versions 10.15.7 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:* Versions 10.15.7 security_update_2020 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:* Versions 10.15.7 security_update_2020-001 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:* Versions 10.15.7 security_update_2020-005 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:* Versions 10.15.7 security_update_2020-007 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:* Versions 10.15.7 security_update_2021-001 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:* Versions 10.15.7 security_update_2021-002 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:* Versions 10.15.7 security_update_2021-003 Vulnerable ·Apple
- cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:* Versions 10.15.7 supplemental_update Vulnerable ·Apple
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* Versions before 11.6 Vulnerable ·Apple
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* Versions before 8.0 Vulnerable ·Apple
Remediation
- Fix · CNA iOS and iPadOS (Apple) Fixed in 15
- Fix · CNA watchOS (Apple) Fixed in 8
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Apple iOS and iPadOS 15
12 records Highest priority Priority MEDIUM 1 MEDIUM, 11 LOW
Other records, highest priority first
- TI-2021-11208 Apple Security Update - Catalina: Processing a maliciously crafted image may lead to…Priority MEDIUM 40
- TI-2021-11221 Out-of-bounds write in Apple iOS and iPadOSPriority LOW 38
- TI-2021-11220 Out-of-bounds write in Apple iOS and iPadOSPriority LOW 37
- Release ·
Apple watchOS 8
6 records Highest priority Priority MEDIUM 1 MEDIUM, 5 LOW
Other records, highest priority first
- TI-2021-11208 Apple Security Update - Catalina: Processing a maliciously crafted image may lead to…Priority MEDIUM 40
- TI-2021-11221 Out-of-bounds write in Apple iOS and iPadOSPriority LOW 38
- TI-2021-11218 Out-of-bounds write in Apple iOS and iPadOSPriority LOW 37
Timeline
- 2026-10-02 Threatist record created from CVE-2021-30811
- 2026-10-03 Alias added: GHSA-8593-g4x7-7rqc
References
Advisory 7
- https://support.apple.com/kb/HT212603
- https://support.apple.com/kb/HT212600
- https://support.apple.com/kb/HT212804
- https://support.apple.com/en-us/HT212814
- https://support.apple.com/en-us/HT212819
- 20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8
- 20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15
More Apple Ipados vulnerabilities
- TI-2025-28008 Out-of-bounds write in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 10.0
- TI-2025-22441 Apple iOS and iPadOS: An attacker with arbitrary read and write capability may be able to… KEVCVSS 3.1CRITICAL 9.8
- TI-2025-22440 Memory corruption in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 9.8
- TI-2025-17951 Out-of-bounds write in Apple Safari KEVCVSS 3.1CRITICAL 10.0
- TI-2025-17847 Use after free in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 10.0
- TI-2022-06854 Out-of-bounds write in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2021-30811 · CVE Program
- CVE-2021-30811 · NVD
- FIRST EPSS
- GHSA-8593-g4x7-7rqc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences