Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2021-1782

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..

CVSS 7.0 · HighBuzz score 59.4KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 59.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 24.9 · diversity 9.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
24.9
11 evidence mentions in the snapshot
Diversity score
9.5
4 sources across 1 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
11 source links · newest first
  • Apple released emergency update to fix zero-day actively exploitedSecurity Affairs

    Apple released emergency updates for both iOS and iPadOS to address a zero-day flaw that is actively exploited in the wild. Apple has released iOS 15.0.2 and iPadOS 15.0.2 to address a zero-day flaw, tracked as CVE-2021-30883, that is actively exploited in the wild. The flaw is a critical memory corruption issue that resides in […]

    newssecurityaffairs.comOct 11, 2021, 11:43 PM
  • Update now! Apple patches another privilege escalation bug in iOS and iPadOSMalwarebytes Labs

    Apple has released a security update for iOS and iPad that addresses a critical vulnerability reportedly being exploited in the wild.The…

    newswww.malwarebytes.comOct 11, 2021, 5:00 PM
  • Apple fixes CVE-2021-30807 flaw, the 13th zero-day this yearSecurity Affairs

    Apple released a security update that addresses CVE-2021-30807 flaw in macOS and iOS that may have been actively exploited to deliver malware Apple addressed a security flaw, tracked as CVE-2021-30807, in macOS and iOS that may have been actively exploited to plant malware on vulnerable devices. The vulnerability resides in the IOMobileFramebuffer, which is a […]

    newssecurityaffairs.comJul 26, 2021, 10:16 PM
  • Apple released out-of-band updates for a new Zero‑Day actively exploitedSecurity Affairs

    Apple has released new out-of-band updates for iOS, iPadOS, macOS and watchOS to address another zero‑day flaw, tracked CVE-2021-1879, actively exploited. Apple has released a new set of out-of-band patches for iOS, iPadOS, macOS and watchOS to address a critical zero-day vulnerability, tracked as CVE-2021-1879, that is being actively exploited in the wild. The vulnerability resides […]

    newssecurityaffairs.comMar 27, 2021, 10:25 AM
  • Apple fixes CVE-2021-1844 RCE that affects iOS, macOS, watchOS, and SafariSecurity Affairs

    Apple released out-of-band patches to address a remote code execution, tracked as CVE-2021-1844, that affect iOS, macOS, watchOS, and Safari web browser. Apple has released out-of-band security patches to address a critical iOS, macOS, watchOS, and Safari web browser to address a security flaw tracked as CVE-2021-1844. The vulnerability was discovered by Clément Lecigne of […]

    newssecurityaffairs.comMar 9, 2021, 2:57 PM
  • Pwn20wnd released the unc0ver v 6.0 jailbreaking toolSecurity Affairs

    The popular jailbreaking tool called “unc0ver” now supports iOS 14.3 and earlier releases, and is able to unlock almost every iPhone device. Pwn20wnd, the author of the jailbreaking tool “unc0ver,” has updated their software to support iOS 14.3 and earlier releases. The last release of the jailbreaking tool, unc0ver v6.0.0, now includes the exploit code […]

    newssecurityaffairs.comMar 2, 2021, 8:24 PM
  • New ‘Unc0ver’ Jailbreak Uses Vulnerability That Apple Said Was ExploitedSecurityWeek

    The latest version of the Unc0ver jailbreak leverages a vulnerability that Apple said had been exploited before it released a patch in January.

    newswww.securityweek.comMar 2, 2021, 3:47 PM
  • Apple Issues Patches for NAT Slipstreaming 2.0 AttackSecurityWeek

    Apple this week released security updates to address multiple vulnerabilities in macOS and Safari, including a flaw that can be exploited for the recently disclosed NAT Slipstreaming 2.0 attack .

    newswww.securityweek.comFeb 2, 2021, 11:26 AM
  • Apple addresses three iOS zero-day flaws exploited in the wildSecurity Affairs

    Apple has addressed three zero-day vulnerabilities in its iOS operating system that have been exploited in the wild. Apple has addressed three zero-day vulnerabilities in iOS that have been exploited in the wild with the release of security updates (iOS 14.4). The first zero-day issue, tracked as CVE-2021-1782, is a race condition that resides in the […]

    newssecurityaffairs.comJan 27, 2021, 2:01 PM
  • Apple fixes three actively exploited iOS zero-daysHelp Net Security

    Apple has release a new batch of security updates and has fixed three iOS zero-days that “may have been actively exploited” by attackers. The three zero-days Two of the zero-day vulnerabilities (CVE-2021-1870 and CVE-2021-1871) are logic issues affecting the WebKit browser engine, which may allow a remote attacker to achieve code execution on devices running a vulnerable version of iOS or iPadOS (i.e., those prior to version 14.4). The third zero-day (CVE-2021-1782) affects the operating … More →

    newswww.helpnetsecurity.comJan 27, 2021, 11:30 AM
  • Apple Ships Emergency Fixes for Under-Attack iOS Zero-DaySecurityWeek

    Apple on Tuesday dropped emergency security patches for its flagship iOS and iPad OS platforms alongside a warning that hackers may already be exploiting three different security vulnerabilities. The patches — contained in iOS 14.4 and iPadOS 14.4 — are currently being pushed to mobile users via the automatic updating mechanism. Apple did not provide technical details of the vulnerabilities or the in-the-wild attacks, except to identify the flaws in the Kernel and in WebKit, the open-source web browser engine used in Safari, Mail, AppStore and a range of MacOS and iOS apps. Here are the bare-bones details from Apple: CVE-2021-1782 (Kernel) — Impact: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited . Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation). Anonymously reported. CVE-2021-1871 and CVE-2021-1870 (WebKit) — Impact: A remote attacker…

    newswww.securityweek.comJan 26, 2021, 7:52 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence