CVE-2021-30758: 
Apple Safari vulnerability analysis and mitigation

CVE-2021-30758 is a type confusion vulnerability in Apple's WebKit component that was disclosed and patched in July 2021. The vulnerability affects multiple Apple products including iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. The issue was discovered by Christoph Guttandin of Media Codings (Apple Advisory).

The vulnerability is classified as a type confusion issue in WebKit that was addressed with improved state handling. It has a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is tracked as CWE-843: Access of Resource Using Incompatible Type (NVD).

When exploited, processing maliciously crafted web content may lead to arbitrary code execution on affected systems. This could allow attackers to execute malicious code in the context of the WebKit process (Apple Advisory).

Apple has released security updates to address this vulnerability in multiple products: iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. Users are advised to update to these versions or later to mitigate the vulnerability (Apple Advisory).