CVE-2021-30951: 
Apple Safari vulnerability analysis and mitigation

CVE-2021-30951 is a use-after-free vulnerability that affects multiple Apple operating systems and Safari browser. The vulnerability was discovered by Pangu and fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. The issue was addressed with improved memory management (Apple Support).

The vulnerability is classified as a use-after-free issue in WebKit, Apple's browser engine. It has a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability requires user interaction and can be exploited through maliciously crafted web content (NVD).

When successfully exploited, this vulnerability allows processing of maliciously crafted web content to lead to arbitrary code execution. This means an attacker could potentially execute unauthorized code on the affected system (Debian Security).

Apple has released security updates to address this vulnerability across multiple platforms: tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Users are recommended to update their systems to these versions. For Debian systems, the fix is available in webkit2gtk version 2.34.4-1~deb11u1 for bullseye and 2.34.4-1~deb10u1 for buster (Debian Security).