{"vulnerability": "cve-2021-30762", "sightings": [{"uuid": "8cb57c35-b8ab-43fb-a6bf-19bb359c8f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "b64c3991-9abc-473c-9549-e0945ed352c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "7297b93a-7423-4d40-8eb8-2f3a1329c1b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971140", "content": "", "creation_timestamp": "2024-12-24T20:24:50.253263Z"}, {"uuid": "a9165a5f-11e8-428e-86da-692e53bd98be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:55.000000Z"}, {"uuid": "e31bf196-44cf-4751-8287-8d835d1edd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=599", "content": "", "creation_timestamp": "2021-06-16T04:00:00.000000Z"}, {"uuid": "d16c1886-ef31-4991-a88d-1ffa7d0b0d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/36598e33-3b56-43dc-8f06-7397c35b8199", "content": "", "creation_timestamp": "2026-02-02T12:28:37.025043Z"}, {"uuid": "153a3dd2-fe4e-4b7a-a783-ed8a7fb94c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://t.me/cKure/5915", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Apple \ud83c\udf4e Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild.\n\nCVE-2021-30761\u00a0- A memory corruption issue that could be exploited to gain arbitrary code execution when processing maliciously crafted web content. The flaw was addressed with improved state management.\n\nCVE-2021-30762\u00a0- A use-after-free issue that could be exploited to gain arbitrary code execution when processing maliciously crafted web content. The flaw was resolved with improved memory management.\n\nhttps://thehackernews.com/2021/06/apple-issues-urgent-patches-for-2-zero.html", "creation_timestamp": "2021-06-15T07:49:16.000000Z"}, {"uuid": "7bd4eb03-4858-4d51-a521-f88813da8f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4269", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-30762\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2021-09-08T14:15:10.300\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT212548\n2. https://support.apple.com/en-us/HT212548", "creation_timestamp": "2025-02-13T17:09:40.000000Z"}, {"uuid": "e14ebdad-f62d-43fc-ba83-72547cdd7813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "Telegram/v8K-WfQM53rkts0yUUBJNgSx5gAVQ_UbhwLYfcXreJhjnJo7", "content": "", "creation_timestamp": "2025-02-14T10:08:10.000000Z"}, {"uuid": "b99732c6-d3f2-43de-8007-0ab65759f0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://t.me/androidMalware/1231", "content": "Apple Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild (CVE-2021-30761, CVE-2021-30762)\nhttps://thehackernews.com/2021/06/apple-issues-urgent-patches-for-2-zero.html", "creation_timestamp": "2021-06-21T17:35:35.000000Z"}, {"uuid": "84df6993-b049-46d6-b858-fb69548338f1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7a77c275-7ee1-4783-940b-52db13997659", "content": "", "creation_timestamp": "2026-06-19T12:47:55.845709Z"}, {"uuid": "15b1b588-5c91-4073-9ce6-9334108f8189", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b82ff4dd-4240-4777-b906-426e1f7f6093", "content": "", "creation_timestamp": "2026-06-23T14:04:47.722023Z"}, {"uuid": "5dd62ad4-afa2-40ff-94c8-7f576cff06cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "https://t.me/hacking_Attack/27311", "content": "Black Hat Ethical Hacking\nEmergency Apple iOS 15.0.2 update fixes zero-day used in attacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156 \nReading Time: 1 Minute\nApple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.\nThis vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer\u00a0allowing an application to execute commands on vulnerable devices with kernel privileges.\n\nAs kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.\n\nWhile Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said in a security advisory\u00a0published earlier today.\nSee Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.\n\nHowever, soon after the vulnerability was released, security researcher Saar Amar\u00a0published a technical writeup and proof-of-concept exploit\u00a0that was derived from reverse engineering the patch.\n\nThe list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).\n\nWhile it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.\nSee Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today\u2019s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:\n\n* two zero-days earlier this month, one of them\u00a0used also used to install Pegasus spyware on iPhones,\n* the FORCEDENTRY\u00a0exploit\u00a0disclosed in August (previously tracked by\u00a0Amnesty Tech as Megalodon),\n* three iOS zero-days\u00a0(CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous\u00a0researchers,\n* an iOS zero-day\u00a0(CVE-2021-1879) in March that may have also been actively exploited,\n* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657)\u00a0in April, exploited by Shlayer malware,\n* three other iOS zero-days\u00a0(CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,\n* a macOS zero-day (CVE-2021-30713)\u00a0in May, which was abused by the XCSSET malware to bypass Apple\u2019s TCC privacy protection,\n* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762)\u00a0in June that \u201cmay have been actively exploited\u201d to hack into older iPhone, iPad, and iPod devices.\nSee Also: Offensive Security Tool: Whispers\nLast month, a researcher publicly disclosed exploits for three zero-day vulnerabilities\u00a0after Apple delayed patching and failed to credit the person who reported them.\nSee Also: Hacking stories \u2013 Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:14.986157Z"}, {"uuid": "b06e63ca-cc24-446e-b129-b2bea511b4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "https://t.me/hacking_Attack/12990", "content": "Black Hat Ethical Hacking\nApple Hurries Patches for Safari Bugs Under Active Attack\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Hurries Patches for Safari Bugs Under Active AttackPost Views: 52 \nReading Time: 1 Minute\nApple issued two out-of-band security fixes for its Safari web browser, fixing zero-day vulnerabilities that \u201cmay have been actively exploited,\u201d according to a Monday security bulletin by the company.\nThe bugs affect sixth-generation Apple iPhones, iPads and iPod touch model hardware, released between 2013 and 2018.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company wrote. Technical details of the two bugs, Apple said, will not be released, \u201cuntil an investigation has occurred and patches or releases are available.\u201d\n\nBoth bugs are tied to Apple\u2019s Safari browser and the underlying iOS code, called WebKit, which is responsible for rendering web pages. Apple is crediting the discovery of both bugs (CVE-2021-30761 and CVE-2021-30762) to an anonymous researcher.\n\nThe patch, iOS 12.5.4, is available for download.\nSee Also: RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries Memory Corruption Bug: CVE-2021-30761One of the bugs patched by Apple addresses a \u201cmemory corruption issue\u201d and improves the Apple WebKit state management.\n\n\u201cState management refers to the management of the state of one or more user interface controls such as text fields, OK buttons, radio buttons, etc. in a graphical user interface,\u201d according to a technical description of the term.\n\nAccording to Apple, the patch for the bug, logged as CVE-2012-30761, addresses a bug found in iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation). This range of hardware was released between 2013 and 2018.\nSee Also: Offensive Security Tool: CloudFail Use After Free Flaw: CVE-2021-30762The second flaw was identified as a use-after-free bug, which is a type of memory corruption vulnerability. The bug, tracked as CVE-20121-30762, allows an attacker to execute code on targeted devices. According to Apple, adversaries may be exploiting this flaw on unpatched devices. In its advisory Apple wrote: \u201cImpact: Processed maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.\u201d\n\nApple added that the \u201cuse-after-free issue was addressed with improved memory management.\u201d\n\n\u201c[A] use-after-free is a vulnerability [is] related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to hack the program,\u201d according to a Kaspersky description of this type of bug. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat The iOS patch, distributed as a iOS 12.5.4 update, is for the same model hardware as above: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation).\n\nApple is not releasing any additional details pertaining to these vulneraries.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Microsoft-Teams-e1623702241390-90x90.png Microsoft Teams: Very Bad Tabs Could Have Led to BEC1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/FIFA-21-90x90.jpg Hackers Steal FIFA 21 Source Code, Tools in EA Breach2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untit[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:36.217927Z"}, {"uuid": "16a2df11-2ef4-41b5-bfc0-00b750407d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "https://t.me/hacking_Attack/27311", "content": "Black Hat Ethical Hacking\nEmergency Apple iOS 15.0.2 update fixes zero-day used in attacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156 \nReading Time: 1 Minute\nApple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.\nThis vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer\u00a0allowing an application to execute commands on vulnerable devices with kernel privileges.\n\nAs kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.\n\nWhile Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said in a security advisory\u00a0published earlier today.\nSee Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.\n\nHowever, soon after the vulnerability was released, security researcher Saar Amar\u00a0published a technical writeup and proof-of-concept exploit\u00a0that was derived from reverse engineering the patch.\n\nThe list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).\n\nWhile it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.\nSee Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today\u2019s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:\n\n* two zero-days earlier this month, one of them\u00a0used also used to install Pegasus spyware on iPhones,\n* the FORCEDENTRY\u00a0exploit\u00a0disclosed in August (previously tracked by\u00a0Amnesty Tech as Megalodon),\n* three iOS zero-days\u00a0(CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous\u00a0researchers,\n* an iOS zero-day\u00a0(CVE-2021-1879) in March that may have also been actively exploited,\n* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657)\u00a0in April, exploited by Shlayer malware,\n* three other iOS zero-days\u00a0(CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,\n* a macOS zero-day (CVE-2021-30713)\u00a0in May, which was abused by the XCSSET malware to bypass Apple\u2019s TCC privacy protection,\n* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762)\u00a0in June that \u201cmay have been actively exploited\u201d to hack into older iPhone, iPad, and iPod devices.\nSee Also: Offensive Security Tool: Whispers\nLast month, a researcher publicly disclosed exploits for three zero-day vulnerabilities\u00a0after Apple delayed patching and failed to credit the person who reported them.\nSee Also: Hacking stories \u2013 Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:42.192287Z"}, {"uuid": "481d684e-617e-4d5d-818e-de6dfda7e02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "seen", "source": "https://t.me/hacking_Attack/12990", "content": "Black Hat Ethical Hacking\nApple Hurries Patches for Safari Bugs Under Active Attack\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Hurries Patches for Safari Bugs Under Active AttackPost Views: 52 \nReading Time: 1 Minute\nApple issued two out-of-band security fixes for its Safari web browser, fixing zero-day vulnerabilities that \u201cmay have been actively exploited,\u201d according to a Monday security bulletin by the company.\nThe bugs affect sixth-generation Apple iPhones, iPads and iPod touch model hardware, released between 2013 and 2018.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company wrote. Technical details of the two bugs, Apple said, will not be released, \u201cuntil an investigation has occurred and patches or releases are available.\u201d\n\nBoth bugs are tied to Apple\u2019s Safari browser and the underlying iOS code, called WebKit, which is responsible for rendering web pages. Apple is crediting the discovery of both bugs (CVE-2021-30761 and CVE-2021-30762) to an anonymous researcher.\n\nThe patch, iOS 12.5.4, is available for download.\nSee Also: RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries Memory Corruption Bug: CVE-2021-30761One of the bugs patched by Apple addresses a \u201cmemory corruption issue\u201d and improves the Apple WebKit state management.\n\n\u201cState management refers to the management of the state of one or more user interface controls such as text fields, OK buttons, radio buttons, etc. in a graphical user interface,\u201d according to a technical description of the term.\n\nAccording to Apple, the patch for the bug, logged as CVE-2012-30761, addresses a bug found in iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation). This range of hardware was released between 2013 and 2018.\nSee Also: Offensive Security Tool: CloudFail Use After Free Flaw: CVE-2021-30762The second flaw was identified as a use-after-free bug, which is a type of memory corruption vulnerability. The bug, tracked as CVE-20121-30762, allows an attacker to execute code on targeted devices. According to Apple, adversaries may be exploiting this flaw on unpatched devices. In its advisory Apple wrote: \u201cImpact: Processed maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.\u201d\n\nApple added that the \u201cuse-after-free issue was addressed with improved memory management.\u201d\n\n\u201c[A] use-after-free is a vulnerability [is] related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to hack the program,\u201d according to a Kaspersky description of this type of bug. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat The iOS patch, distributed as a iOS 12.5.4 update, is for the same model hardware as above: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation).\n\nApple is not releasing any additional details pertaining to these vulneraries.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Microsoft-Teams-e1623702241390-90x90.png Microsoft Teams: Very Bad Tabs Could Have Led to BEC1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/FIFA-21-90x90.jpg Hackers Steal FIFA 21 Source Code, Tools in EA Breach2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untit[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:12.599591Z"}, {"uuid": "2fd5d9c8-fb99-4a3f-a178-7bd75e570627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://t.me/hacking_Attack/27311", "content": "Black Hat Ethical Hacking\nEmergency Apple iOS 15.0.2 update fixes zero-day used in attacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156 \nReading Time: 1 Minute\nApple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.\nThis vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer\u00a0allowing an application to execute commands on vulnerable devices with kernel privileges.\n\nAs kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.\n\nWhile Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said in a security advisory\u00a0published earlier today.\nSee Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.\n\nHowever, soon after the vulnerability was released, security researcher Saar Amar\u00a0published a technical writeup and proof-of-concept exploit\u00a0that was derived from reverse engineering the patch.\n\nThe list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).\n\nWhile it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.\nSee Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today\u2019s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:\n\n* two zero-days earlier this month, one of them\u00a0used also used to install Pegasus spyware on iPhones,\n* the FORCEDENTRY\u00a0exploit\u00a0disclosed in August (previously tracked by\u00a0Amnesty Tech as Megalodon),\n* three iOS zero-days\u00a0(CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous\u00a0researchers,\n* an iOS zero-day\u00a0(CVE-2021-1879) in March that may have also been actively exploited,\n* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657)\u00a0in April, exploited by Shlayer malware,\n* three other iOS zero-days\u00a0(CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,\n* a macOS zero-day (CVE-2021-30713)\u00a0in May, which was abused by the XCSSET malware to bypass Apple\u2019s TCC privacy protection,\n* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762)\u00a0in June that \u201cmay have been actively exploited\u201d to hack into older iPhone, iPad, and iPod devices.\nSee Also: Offensive Security Tool: Whispers\nLast month, a researcher publicly disclosed exploits for three zero-day vulnerabilities\u00a0after Apple delayed patching and failed to credit the person who reported them.\nSee Also: Hacking stories \u2013 Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T08:00:06.109224Z"}, {"uuid": "3f5f6d60-d4a0-4ac8-98ed-321988ccafeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://t.me/hacking_Attack/27311", "content": "Black Hat Ethical Hacking\nEmergency Apple iOS 15.0.2 update fixes zero-day used in attacks\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Emergency Apple iOS 15.0.2 update fixes zero-day used in attacksPost Views: 156 \nReading Time: 1 Minute\nApple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.\nThis vulnerability, tracked as CVE-2021-30883, is a critical memory corruption bug in the IOMobileFrameBuffer\u00a0allowing an application to execute commands on vulnerable devices with kernel privileges.\n\nAs kernel privileges allow the application to execute any command on the device, threat actors could potentially use it to steal data or install further malware.\n\nWhile Apple has not provided any details on how this vulnerability was used in attacks, they state that there are reports of it being actively used in attacks.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company said in a security advisory\u00a0published earlier today.\nSee Also: Complete Offensive Security and Ethical Hacking Course Apple purposely keeps vulnerability reports vague to make sure the update is applied to as many devices as possible before other threat actors can learn the details or reverse engineer the patch to create their own exploits.\n\nHowever, soon after the vulnerability was released, security researcher Saar Amar\u00a0published a technical writeup and proof-of-concept exploit\u00a0that was derived from reverse engineering the patch.\n\nThe list of impacted devices is quite extensive, affecting older and newer models, including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th eneration).\n\nWhile it is possible that the vulnerability is used in targeted attacks and is not widely used, it is strongly advised to install the update as soon as possible due to its severity.\nSee Also: Apple Pay with VISA lets hackers force payments on locked iPhones Zero-days gone wildBesides today\u2019s zero-day, Apple has fixed what feels like a never-ending stream of zero-day vulnerabilities used in attacks against iPhone, iPads, and macOS devices:\n\n* two zero-days earlier this month, one of them\u00a0used also used to install Pegasus spyware on iPhones,\n* the FORCEDENTRY\u00a0exploit\u00a0disclosed in August (previously tracked by\u00a0Amnesty Tech as Megalodon),\n* three iOS zero-days\u00a0(CVE-2021-1870, CVE-2021-1871, CVE-2021-1872) in February, exploited in the wild and reported by anonymous\u00a0researchers,\n* an iOS zero-day\u00a0(CVE-2021-1879) in March that may have also been actively exploited,\n* one zero-day in iOS (CVE-2021-30661) and one in macOS (CVE-2021-30657)\u00a0in April, exploited by Shlayer malware,\n* three other iOS zero-days\u00a0(CVE-2021-30663, CVE-2021-30665, and CVE-2021-30666) in May, bugs allowing for arbitrary remote code execution (RCE) simply by visiting malicious websites,\n* a macOS zero-day (CVE-2021-30713)\u00a0in May, which was abused by the XCSSET malware to bypass Apple\u2019s TCC privacy protection,\n* two iOS zero-day bugs (CVE-2021-30761 and CVE-2021-30762)\u00a0in June that \u201cmay have been actively exploited\u201d to hack into older iPhone, iPad, and iPod devices.\nSee Also: Offensive Security Tool: Whispers\nLast month, a researcher publicly disclosed exploits for three zero-day vulnerabilities\u00a0after Apple delayed patching and failed to credit the person who reported them.\nSee Also: Hacking stories \u2013 Operation Aurora: When China hacked Google Source: www.bleepingcomputer.com (Click Link)Recent News* https://www.blackhatethicalhacking.com[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:52.606571Z"}, {"uuid": "f3e77929-ae8e-4ca8-b4ca-fc6c09c76318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://t.me/hacking_Attack/12990", "content": "Black Hat Ethical Hacking\nApple Hurries Patches for Safari Bugs Under Active Attack\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Hurries Patches for Safari Bugs Under Active AttackPost Views: 52 \nReading Time: 1 Minute\nApple issued two out-of-band security fixes for its Safari web browser, fixing zero-day vulnerabilities that \u201cmay have been actively exploited,\u201d according to a Monday security bulletin by the company.\nThe bugs affect sixth-generation Apple iPhones, iPads and iPod touch model hardware, released between 2013 and 2018.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company wrote. Technical details of the two bugs, Apple said, will not be released, \u201cuntil an investigation has occurred and patches or releases are available.\u201d\n\nBoth bugs are tied to Apple\u2019s Safari browser and the underlying iOS code, called WebKit, which is responsible for rendering web pages. Apple is crediting the discovery of both bugs (CVE-2021-30761 and CVE-2021-30762) to an anonymous researcher.\n\nThe patch, iOS 12.5.4, is available for download.\nSee Also: RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries Memory Corruption Bug: CVE-2021-30761One of the bugs patched by Apple addresses a \u201cmemory corruption issue\u201d and improves the Apple WebKit state management.\n\n\u201cState management refers to the management of the state of one or more user interface controls such as text fields, OK buttons, radio buttons, etc. in a graphical user interface,\u201d according to a technical description of the term.\n\nAccording to Apple, the patch for the bug, logged as CVE-2012-30761, addresses a bug found in iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation). This range of hardware was released between 2013 and 2018.\nSee Also: Offensive Security Tool: CloudFail Use After Free Flaw: CVE-2021-30762The second flaw was identified as a use-after-free bug, which is a type of memory corruption vulnerability. The bug, tracked as CVE-20121-30762, allows an attacker to execute code on targeted devices. According to Apple, adversaries may be exploiting this flaw on unpatched devices. In its advisory Apple wrote: \u201cImpact: Processed maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.\u201d\n\nApple added that the \u201cuse-after-free issue was addressed with improved memory management.\u201d\n\n\u201c[A] use-after-free is a vulnerability [is] related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to hack the program,\u201d according to a Kaspersky description of this type of bug. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat The iOS patch, distributed as a iOS 12.5.4 update, is for the same model hardware as above: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation).\n\nApple is not releasing any additional details pertaining to these vulneraries.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Microsoft-Teams-e1623702241390-90x90.png Microsoft Teams: Very Bad Tabs Could Have Led to BEC1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/FIFA-21-90x90.jpg Hackers Steal FIFA 21 Source Code, Tools in EA Breach2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untit[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T03:00:06.322662Z"}, {"uuid": "11744ea6-437e-4dc3-8873-f9ae83875b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30762", "type": "exploited", "source": "https://t.me/hacking_Attack/12990", "content": "Black Hat Ethical Hacking\nApple Hurries Patches for Safari Bugs Under Active Attack\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Apple Hurries Patches for Safari Bugs Under Active AttackPost Views: 52 \nReading Time: 1 Minute\nApple issued two out-of-band security fixes for its Safari web browser, fixing zero-day vulnerabilities that \u201cmay have been actively exploited,\u201d according to a Monday security bulletin by the company.\nThe bugs affect sixth-generation Apple iPhones, iPads and iPod touch model hardware, released between 2013 and 2018.\n\n\u201cApple is aware of a report that this issue may have been actively exploited,\u201d the company wrote. Technical details of the two bugs, Apple said, will not be released, \u201cuntil an investigation has occurred and patches or releases are available.\u201d\n\nBoth bugs are tied to Apple\u2019s Safari browser and the underlying iOS code, called WebKit, which is responsible for rendering web pages. Apple is crediting the discovery of both bugs (CVE-2021-30761 and CVE-2021-30762) to an anonymous researcher.\n\nThe patch, iOS 12.5.4, is available for download.\nSee Also: RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries Memory Corruption Bug: CVE-2021-30761One of the bugs patched by Apple addresses a \u201cmemory corruption issue\u201d and improves the Apple WebKit state management.\n\n\u201cState management refers to the management of the state of one or more user interface controls such as text fields, OK buttons, radio buttons, etc. in a graphical user interface,\u201d according to a technical description of the term.\n\nAccording to Apple, the patch for the bug, logged as CVE-2012-30761, addresses a bug found in iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation). This range of hardware was released between 2013 and 2018.\nSee Also: Offensive Security Tool: CloudFail Use After Free Flaw: CVE-2021-30762The second flaw was identified as a use-after-free bug, which is a type of memory corruption vulnerability. The bug, tracked as CVE-20121-30762, allows an attacker to execute code on targeted devices. According to Apple, adversaries may be exploiting this flaw on unpatched devices. In its advisory Apple wrote: \u201cImpact: Processed maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.\u201d\n\nApple added that the \u201cuse-after-free issue was addressed with improved memory management.\u201d\n\n\u201c[A] use-after-free is a vulnerability [is] related to incorrect use of dynamic memory during program operation. If after freeing a memory location, a program does not clear the pointer to that memory, an attacker can use the error to hack the program,\u201d according to a Kaspersky description of this type of bug. See Also: Jeff Moss, aka Dark Tangent, the person who founded DEF CON and Black Hat The iOS patch, distributed as a iOS 12.5.4 update, is for the same model hardware as above: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation).\n\nApple is not releasing any additional details pertaining to these vulneraries.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Microsoft-Teams-e1623702241390-90x90.png Microsoft Teams: Very Bad Tabs Could Have Led to BEC1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/FIFA-21-90x90.jpg Hackers Steal FIFA 21 Source Code, Tools in EA Breach2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/06/Untit[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:45.907003Z"}]}