CVE-2021-30820: Apple iPadOS

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8. A remote attacker may be able to cause arbitrary code execution.

Affected products

• Apple iPadOS: before 14.8 (fixed in 14.8)
• Apple iPhone OS: before 14.8 (fixed in 14.8)

Published 2021-10-19. Last modified 2026-06-17.