Intrusion PreventionApple.WebKit.IndexedDB.Handling.Use.After.Free
Description
This indicates an attack attempt to exploit an Use After Free vulnerability in Apple WebKit.
The vulnerability is due to an improper memory management in the application when handling a crafted file. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.
Affected Products
IOS 12.5.4 and earlier versions
iOS 14.7 and earlier versions
iPadOS 14.7 and earlier versions
macOS 11.5 and earlier versions
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://support.apple.com/en-us/103147
https://support.apple.com/en-us/103150
https://support.apple.com/en-us/103157
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 55489 |
| Created | Apr 09, 2024 |
| Updated | Apr 17, 2024 |
| Risk |
|
| CVE ID | CVE-2021-30858 |
| Known Exploited | Yes |
| Exploit Prediction Score | 0.83% |
| Default Action | drop |
| Active | |
| Affected OS | MacOS, Other |
| Affected App | Apple |