ByteOS

Product:iOS, macOS, watchOS

Added At:25 Aug, 2022

Due At:15 Sep, 2022

Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions.

Used in Ransomware

Unknown

CWE

CWE-20 CWE-502

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://support.apple.com/en-us/HT212804, https://support.apple.com/en-us/HT212805, https://support.apple.com/en-us/HT212806, https://support.apple.com/en-us/HT212807, https://support.apple.com/en-us/HT212824; https://nvd.nist.gov/vuln/detail/CVE-2021-31010

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:24 Aug, 2021 | 18:51

Updated At:30 Jul, 2025 | 01:38

▼CVE Numbering Authority (CNA)

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..

From unspecified before 12.5 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release.

Type: text

CWE ID: N/A

Description: A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release.

References

Hyperlink	Resource
https://support.apple.com/en-us/HT212804	x_refsource_MISC
https://support.apple.com/en-us/HT212805	x_refsource_MISC
https://support.apple.com/en-us/HT212807	x_refsource_MISC
https://support.apple.com/en-us/HT212806	x_refsource_MISC
https://support.apple.com/en-us/HT212824	x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212804

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212805

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212807

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212806

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212824

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT212804	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT212805	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT212807	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT212806	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT212824	x_refsource_MISC x_transferred

Hyperlink: https://support.apple.com/en-us/HT212804

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT212805

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT212807

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT212806

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT212824

Resource:

x_refsource_MISC

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-502	CWE-502 Deserialization of Untrusted Data

Type: CWE

CWE ID: CWE-502

Description: CWE-502 Deserialization of Untrusted Data

Metrics

Version	Base score	Base severity	Vector
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Metrics Other Info

kev

dateAdded:

2022-08-25

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-31010

Timeline

Event	Date
CVE-2021-31010 added to CISA KEV	2022-08-25 00:00:00

Event: CVE-2021-31010 added to CISA KEV

Date: 2022-08-25 00:00:00

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:24 Aug, 2021 | 19:15

Updated At:29 Jan, 2025 | 18:15

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-08-25	2022-09-15	Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability	Apply updates per vendor instructions.

Date Added: 2022-08-25

Due Date: 2022-09-15

Vulnerability Name: Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Type: Secondary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 14.8(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions from 12.0(inclusive) to 12.5.5(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions from 14.0(inclusive) to 14.8(exclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

>>mac_os_x>>Versions from 10.15(inclusive) to 10.15.7(exclusive)

cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-004:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*

>>mac_os_x>>10.15.7

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 11.0(inclusive) to 11.6(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

>>watchos>>Versions before 7.6.2(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-502	Primary	nvd@nist.gov
CWE-502	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-502

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-502

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/HT212804	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT212805	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT212806	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT212807	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT212824	product-security@apple.com	Vendor Advisory
https://support.apple.com/en-us/HT212804	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/en-us/HT212805	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/en-us/HT212806	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/en-us/HT212807	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/en-us/HT212824	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212804

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212805

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212806

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212807

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212824

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212804

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212805

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212806

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212807

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT212824

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Similar CVEs

173Records found

CVE-2021-30826

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.29% / 51.90%

7 Day CHG~0.00%

Published-19 Oct, 2021 | 13:11

Updated-03 Aug, 2024 | 22:48

A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. In certain situations, the baseband would fail to enable integrity and ciphering protection.

Vendor-Apple Inc.

Product-iphone_os ipados iOS and iPadOS

CVE-2020-9820

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 46.04%

7 Day CHG~0.00%

Published-09 Jun, 2020 | 16:13

Updated-04 Aug, 2024 | 10:43

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to modify the file system.

Vendor-Apple Inc.

Product-iphone_os ipados iOS

CVE-2020-9916

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.53% / 66.07%

7 Day CHG~0.00%

Published-16 Oct, 2020 | 16:47

Updated-04 Aug, 2024 | 10:43

A URL Unicode encoding issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker may be able to conceal the destination of a URL.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos safari icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CVE-2020-9787

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.29% / 52.15%

7 Day CHG~0.00%

Published-22 Oct, 2020 | 17:53

Updated-04 Aug, 2024 | 10:43

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences.

Vendor-Apple Inc.

Product-iphone_os ipad_os watchos tvos mac_os_x tvOS macOS watchOS iOS

CVE-2020-9941

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-1.47% / 80.11%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 20:52

Updated-04 Aug, 2024 | 10:50

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. A remote attacker may be able to unexpectedly alter application state.

Vendor-Apple Inc.

Product-iphone_os watchos ipados mac_os_x macos macOS

CVE-2014-3620

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5||MEDIUM

EPSS-1.67% / 81.35%

7 Day CHG~0.00%

Published-18 Nov, 2014 | 15:00

Updated-12 Apr, 2025 | 10:46

cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.

Vendor-n/a Apple Inc.CURL

Product-mac_os_x curl libcurl n/a

CVE-2015-5905

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-5||MEDIUM

EPSS-0.38% / 58.40%

7 Day CHG~0.00%

Published-18 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site.

Vendor-n/a Apple Inc.

Product-iphone_os n/a

CVE-2023-26512

Matching Score-6

Matching Score-6

Vendor-Apple Inc.Microsoft Corporation The Apache Software Foundation Linux Kernel Organization, Inc

CVSS Score-9.8||CRITICAL

EPSS-0.07% / 22.61%

7 Day CHG~0.00%

Published-17 Jul, 2023 | 07:16

Updated-21 Nov, 2024 | 07:51

Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data

CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. Users can use the code under the master branch in project repo to fix this issue, we will release the new version as soon as possible.

Product-eventmesh macos linux_kernel windows Apache EventMesh (incubating) RabbitMQ connector eventmesh

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2021-44228

Matching Score-6

Matching Score-6

Vendor-percussion snowsoftware Apple Inc.The Apache Software Foundation Fedora Project Cisco Systems, Inc.Siemens AG Intel Corporation NetApp, Inc.Bentley Systems, Incorporated SonicWall Inc.Debian GNU/Linux

CVSS Score-10||CRITICAL

EPSS-94.36% / 99.96%

7 Day CHG~0.00%

Published-10 Dec, 2021 | 00:00

Updated-08 Aug, 2025 | 18:52

Known KEV||Action Due Date - 2021-12-24||For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Product-common_services_platform_collector solidfire_enterprise_sds oncommand_insight datacenter_manager active_iq_unified_manager operation_scheduler connected_analytics_for_network_deployment industrial_edge_management_hub snapcenter integrated_management_controller_supervisor firepower_1150 iot_operations_dashboard wan_automation_engine firepower_2140 system_studio virtualized_voice_browser firepower_2110 dna_center solid_edge_cam_pro 6bk1602-0aa42-0tp0 energyip comos secure_device_onboard firepower_4120 sppa-t3000_ses3000_firmware siveillance_viewpoint firepower_1120 genomics_kernel_library contact_center_domain_manager crosswork_data_gateway xpedition_package_integrator network_dashboard_fabric_controller 6bk1602-0aa22-0tp0_firmware cloud_secure_agent nexus_insights 6bk1602-0aa22-0tp0 firepower_1010 6bk1602-0aa32-0tp0 email_security unified_contact_center_management_portal opcenter_intelligence xcode dna_spaces_connector finesse solidfire_\&_hci_storage_node packaged_contact_center_enterprise unified_sip_proxy cloudcenter_suite ucs_director energy_engage fxos customer_experience_cloud_agent paging_server logo\!_soft_comfort firepower_2130 siveillance_control_pro spectrum_power_7 cloud_manager network_insights_for_data_center synchro_4d 6bk1602-0aa52-0tp0 solid_edge_harness_design fog_director network_assurance_engine firepower_4115 nexus_dashboard smart_phy business_process_automation 6bk1602-0aa42-0tp0_firmware broadworks firepower_4140 emergency_responder ucs_central computer_vision_annotation_tool video_surveillance_manager connected_mobile_experiences synchro head-end_system_universal_device_integration_system sentron_powermanager fedora cloudcenter_cost_optimizer 6bk1602-0aa12-0tp0_firmware spectrum_power_4 cloudcenter vm_access_proxy cloudcenter_suite_admin oneapi_sample_browser 6bk1602-0aa52-0tp0_firmware firepower_4150 virtual_topology_system firepower_9300 prime_service_catalog brocade_san_navigator enterprise_chat_and_email cloud_connect firepower_4145 teamcenter unified_customer_voice_portal cloud_insights rhythmyx firepower_1140 sipass_integrated siveillance_vantage intersight_virtual_appliance sd-wan_vmanage ucs_central_software contact_center_management_portal webex_meetings_server unified_intelligence_center unified_workforce_optimization energyip_prepay crosswork_zero_touch_provisioning cx_cloud_agent 6bk1602-0aa12-0tp0 unity_connection cloudcenter_workload_manager optical_network_controller virtualized_infrastructure_manager video_surveillance_operations_manager 6bk1602-0aa32-0tp0_firmware unified_communications_manager advanced_malware_protection_virtual_private_cloud_appliance identity_services_engine snow_commander cyber_vision_sensor_management_extension firepower_4112 unified_contact_center_enterprise debian_linux unified_computing_system unified_contact_center_express xpedition_enterprise log4j desigo_cc_advanced_reports ontap_tools unified_communications_manager_im_and_presence_service firepower_2120 mobility_services_engine crosswork_network_automation dna_spaces vesys automated_subsea_tuning cyber_vision siveillance_command evolved_programmable_network_manager dna_spaces\firepower_4110 mendix firepower_4125 sppa-t3000_ses3000 unified_communications_manager_im_\&_presence_service e-car_operation_center nx industrial_edge_management workload_optimization_manager firepower_threat_defense navigator capital crosswork_platform_infrastructure network_services_orchestrator data_center_network_manager crosswork_optimization_engine mindsphere siguard_dsa gma-manager desigo_cc_info_center crosswork_network_controller siveillance_identity Apache Log4j2 Log4j2

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-502

Deserialization of Untrusted Data

CWE ID-CWE-917

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

CVE-2021-42631

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-20.57% / 95.36%

7 Day CHG~0.00%

Published-31 Jan, 2022 | 17:48

Updated-04 Aug, 2024 | 03:38

PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.

Vendor-printerlogic n/a Linux Kernel Organization, Inc Apple Inc.

Product-virtual_appliance macos linux_kernel web_stack n/a

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2019-8662

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-14.43% / 94.17%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos tvos tvOS macOS watchOS iOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2018-6162

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.61% / 81.01%

7 Day CHG~0.00%

Published-09 Jan, 2019 | 19:00

Updated-05 Aug, 2024 | 05:54

Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC Red Hat, Inc.Apple Inc.Debian GNU/Linux

Product-enterprise_linux_server debian_linux chrome enterprise_linux_workstation macos enterprise_linux_desktop Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2023-1405

Matching Score-4

Assigner-WPScan

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-4

Assigner-WPScan

CVSS Score-7.5||HIGH

EPSS-0.28% / 50.84%

7 Day CHG~0.00%

Published-16 Jan, 2024 | 15:56

Updated-11 Jun, 2025 | 17:15

Formidable Forms < 6.2 - Unauthenticated PHP Object Injection

The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.

Vendor-Unknown Strategy11

Product-formidable_forms Formidable Forms

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2022-0138

Matching Score-4

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-4

CVSS Score-7.5||HIGH

EPSS-0.15% / 35.60%

7 Day CHG~0.00%

Published-18 Feb, 2022 | 17:50

Updated-16 Apr, 2025 | 16:45

Airspan Networks Mimosa Deserialization of Untrusted Data

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.

Vendor-Airspan Networks

Product-a5x a5x_firmware c5c c5x c6x_firmware c5c_firmware c6x mimosa_management_platform c5x_firmware PTP C-series MMP PTMP C-series and A5x

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2023-50943

Matching Score-4

Matching Score-4

CVSS Score-7.5||HIGH

EPSS-0.19% / 41.36%

7 Day CHG~0.00%

Published-24 Jan, 2024 | 12:57

Updated-30 May, 2025 | 15:15

Apache Airflow: Potential pickle deserialization vulnerability in XComs

Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enable_xcom_pickling=False" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.

Product-airflow Apache Airflow

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2021-21343

Matching Score-4

Assigner-GitHub, Inc.

Matching Score-4

Assigner-GitHub, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.70% / 71.12%

7 Day CHG~0.00%

Published-22 Mar, 2021 | 23:40

Updated-23 May, 2025 | 17:40

XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in the deletion of a file on the local host. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.

CWE ID-CWE-502

Deserialization of Untrusted Data

CWE ID-CWE-73

External Control of File Name or Path

CVE-2023-46227

Matching Score-4

Matching Score-4

CVSS Score-7.5||HIGH

EPSS-0.04% / 11.47%

7 Day CHG~0.00%

Published-19 Oct, 2023 | 09:40

Updated-12 Sep, 2024 | 21:35

Apache inlong has an Arbitrary File Read Vulnerability

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong. This issue affects Apache InLong: from 1.4.0 through 1.8.0, the attacker can use \t to bypass. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/8814

Product-inlong Apache InLong

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2025-31175

Matching Score-4

Assigner-Huawei Technologies

Matching Score-4

Assigner-Huawei Technologies

CVSS Score-8.4||HIGH

EPSS-0.07% / 21.72%

7 Day CHG~0.00%

Published-07 Apr, 2025 | 03:58

Updated-07 May, 2025 | 21:06

Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity.

Vendor-Huawei Technologies Co., Ltd.

Product-harmonyos emui EMUI HarmonyOS

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2025-31103

Matching Score-4

Assigner-JPCERT/CC

Product-a-blog_cms a-blog cms (Ver.2.9.x series)a-blog cms (Ver. 2.8.x series)a-blog cms (Ver.3.1.x series)a-blog cms (Ver.2.10.x series)a-blog cms (Ver.2.11.x series)a-blog cms (Ver.3.0.x series)

Matching Score-4

Assigner-JPCERT/CC

CVSS Score-7.5||HIGH

EPSS-0.04% / 11.62%

7 Day CHG-0.02%

Published-31 Mar, 2025 | 04:54

Updated-13 May, 2025 | 15:15

Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.

Vendor-appleple appleple inc.

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2022-41596

Matching Score-4

Assigner-Huawei Technologies

Matching Score-4

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.08% / 24.82%

7 Day CHG~0.00%

Published-20 Dec, 2022 | 00:00

Updated-16 Apr, 2025 | 19:15

The system tool has inconsistent serialization and deserialization. Successful exploitation of this vulnerability will cause unauthorized startup of components.

Vendor-Huawei Technologies Co., Ltd.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2023-31058

Matching Score-4

Matching Score-4

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.78%

7 Day CHG~0.00%

Published-22 May, 2023 | 12:54

Updated-11 Oct, 2024 | 21:35

Apache InLong: JDBC URL bypassing by adding blanks

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers would bypass the 'autoDeserialize' option filtering by adding blanks. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7674 https://github.com/apache/inlong/pull/7674 to solve it.

Product-inlong Apache InLong inlong

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2017-18604

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.38% / 58.67%

7 Day CHG~0.00%

Published-10 Sep, 2019 | 11:08

Updated-05 Aug, 2024 | 21:28

The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.

Vendor-sitebuilder_dynamic_components_project n/a

Product-sitebuilder_dynamic_components n/a

CWE ID-CWE-502

Deserialization of Untrusted Data

CWE ID-CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVE-2021-26558

Matching Score-4

Matching Score-4

CVSS Score-7.5||HIGH

EPSS-2.81% / 85.58%

7 Day CHG~0.00%

Published-11 Nov, 2021 | 09:35

Updated-03 Aug, 2024 | 20:26

Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.