CVE-2021-30859: Apple iPadOS

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges.

Affected products

• Apple iPadOS: before 14.8 (fixed in 14.8)
• Apple iPhone OS: before 14.8 (fixed in 14.8)
• Apple Mac OS X: before 10.15.7 (fixed in 10.15.7); version 10.15.7 only
• Apple macOS: from 11.0, before 11.6 (fixed in 11.6)

Published 2021-08-24. Last modified 2026-06-17.