CVE-2021-1811: apple icloud
Vulnerability summary
CVE-2021-1811 is a medium (CVSS 6.5) vulnerability in apple icloud. EPSS estimates a 1.67% chance of exploitation in the next 30 days, higher than 76.4% of scored vulnerabilities.
Timeline
- 08-09-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.67%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
0.00 pp
From 1.67% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apple11 products
- icloud< 12.3
- icloud for windows≥ unspecified, < 12.3
- ios and ipados≥ unspecified, < 14.5
- ipados< 14.5
- iphone_os< 14.5
1 vendor · 11 products