CVE-2021-1870CISA KEVEPSS p94.0%

CVE-2021-1870Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Apple / iOS, iPadOS, and macOS

Description

Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Scoring

EPSS7.92% probability of exploitation · percentile 94.0% · 2026-06-19T12:03:05Z

CISA KEV entry

Added to KEV: 2021-11-03

(incoming)1

TypeTargetConfidenceTier
KEVEntryApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerabilitykev-cve-2021-18700%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Apple iOS WebKit Buffer Overflow Vulnerability
CVE
Apple iOS WebKit Memory Corruption Vulnerability
CVE
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
CVE
Apple Multiple Products WebKit Code Execution Vulnerability
CVE
Apple Multiple Products WebKit Memory Corruption Vulnerability
CVE
Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.