CVE-2021-1874
published 2021-09-08CVE-2021-1874: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary…
PriorityP348high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
1.91%
77.4th percentile
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary code with kernel privileges.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_14.5_and_ipados | — | — |
| apple | ios_and_ipados | >= unspecified < 14.5 | 14.5 |
| apple | ipados | < 14.5 | 14.5 |
| apple | iphone_os | < 14.5 | 14.5 |
| chrome_chrome | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9rvf-pr75-p78c: A logic issue was addressed with improved state management
ghsa_unreviewed·2022-05-24
CVE-2021-1874 [HIGH] GHSA-9rvf-pr75-p78c: A logic issue was addressed with improved state management
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary code with kernel privileges.
Chrome
Stable Channel Update for Desktop: CVE-2022-1873
vendor_chrome·2022-05-24·CVSS 6.5
CVE-2022-1873 [LOW] Stable Channel Update for Desktop: CVE-2022-1873
Stable Channel Update for Desktop
CVE-2022-1873: Insufficient policy enforcement in COOP. Reported by NDevTK on 2022-03-11 [$500][ 1251588 ] Low CVE-2022-1874: Insufficient policy enforcement in Safe Browsing
Reported by hjy79425575 on 2021-09-21 [$500][ 1306443 ] Low CVE-2022-1875: Inappropriate implementation in PDF
Severity: low
Apple
CVE-2021-1874: iOS 14.5 and iPadOS 14.5
vendor_apple·2021-04-26·CVSS 8.8
CVE-2021-1874 [HIGH] CVE-2021-1874: iOS 14.5 and iPadOS 14.5
Apple Security Update: About the security content of iOS 14.5 and iPadOS 14.5
Product: iOS 14.5 and iPadOS
Version: 14.5
CVE: CVE-2021-1874
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A logic issue was addressed with improved state management.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-09-08
Published