Actively exploited in the wild
Apple Multiple Products Race Condition Vulnerability
Apple - Multiple Products · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-1782
HighCVSS 7.0KEVSummary
A race condition exists in Apple products (macOS, iOS, iPadOS, watchOS, tvOS) due to improper locking. A malicious application may be able to elevate privileges. Apple is aware of reports that this issue may have been actively exploited.
Risk Assessment
A local attacker could elevate privileges and gain access to protected system resources, posing a serious threat to device security.
Recommendation
Immediately update Apple systems to macOS Big Sur 11.2, Security Update 2021-001 Catalina/Mojave, iOS/iPadOS 14.4, watchOS 7.3, tvOS 14.4.
Other vulnerabilities in Apple Kernel
See all- CVE-2023-32434HighActively exploited
An integer overflow was addressed with improved input validation. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
- CVE-2026-112517Low risk· EPSS 14%
A use-after-free issue in the Apple kernel was addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112516Low risk· EPSS 14%
A use-after-free issue was addressed with improved memory management in Apple systems. An app may be able to cause unexpected system termination.
- CVE-2026-112515Low risk· EPSS 14%
An out-of-bounds read was addressed with improved bounds checking. An attacker may be able to cause unexpected system termination or read kernel memory.
- CVE-2026-112514Low risk· EPSS 14%
A use-after-free issue was addressed with improved memory management in Apple systems. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
Original NVD description (English source)
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..
Vulnerability data from NVD (NIST) · CISA KEV · EPSS