CVE-2021-30860
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 3, 2026
8 articles
EPSS Score
Source: FIRST.org · 2026-05-24
71.97%
probability
This CVE has a 71.97% probability
of being exploited in the next 30 days.
0%
Top 98.8th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroInteger overflow in CoreGraphics
Google Project Zero
Discovered
Sept. 7, 2021
Patched
Sept. 13, 2021
Reported by
The Citizen Lab
Root Cause Analysis
???
Exploits & PoC
Levilutz/CVE-2021-30860
Scan for evidence of CVE-2021-30860 (FORCEDENTRY) exploit
12
1 repo — triés par ⭐
Rechercher sur GitHub ↗
Apple fixes zero-day in iOS and iPadOS 15.0.2 emergency release: Detect and Prioritize Vulnerabilities using VMDR for Mobile Devices
Qualys
Oct 18, 2021
NSO Pegasus iPhone Spyware Vulnerabilities Fixed by Apple – Detect & Prioritize Using VMDR for Mobile Devices
Qualys
Sep 29, 2021
Detect & Prioritize NSO Pegasus iPhone Spyware Vulnerabilities Using VMDR for Mobile Devices
Qualys
Sep 20, 2021
Apple fixes iOS zero-day used to deploy NSO iPhone spyware
BleepingComputer
Sep 13, 2021
Security Advisory 2021-049
CERT-EU
Sep 14, 2021
Qualys Response to CISA Alert: Binding Operational Directive 22-01
Qualys
Nov 09, 2021
Signal Intelligence
Confidence
92%
EPSS
71.97%
Mentions
8
Last Seen
Nov 09, 2021
CNA Information
Analyst Note
CVE-2021-30860 is confirmed as a critical zero-day affecting Apple products with evidence of active exploitation in the wild, reported by Google Project Zero, and patched across multiple Apple platforms. The high CVSS score (7.8), integer overflow vulnerability enabling arbitrary code execution via malicious PDFs, and official security updates from Apple provide strong validation of the threat.
Triage Info
Decided atMar 03, 2026