Loading vulnerability…
Remote denial of service in Apple Kernel
CVE-2021-1764 is a use-after-free vulnerability in the Apple Kernel affecting macOS, watchOS, tvOS, iOS, and iPadOS. A remote attacker may be able to cause denial of service. Apple addressed the issue through improved memory management. A conflicting account associates this identifier with a privilege-escalation race condition and possible active exploitation; those characteristics are separately attributed to CVE-2021-1782 and cannot be confidently assigned to CVE-2021-1764.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Remote exploitation may cause denial of service. The precise disruption mechanism and duration are unspecified. Conflicting claims of privilege escalation and active exploitation are not consistently corroborated for this CVE.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict exposure to remote attack vectors where feasible, such as limiting network access or disabling affected services, until the official updates can be applied.
Patch, then assume compromise.
Install macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, or iPadOS 14.4, as applicable. These releases address the use-after-free issue through improved memory management.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.