CVE-2021-30869
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 5, 2026
6 articles
EPSS Score
Source: FIRST.org · 2026-05-24
1.72%
probability
This CVE has a 1.72% probability
of being exploited in the next 30 days.
0%
Top 82.6th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroType confusion in XNU
Attack Intelligence
Google Project Zero
Patched
Sept. 23, 2021
Reported by
Erye Hernandez of Google Threat Analysis Group, Clément Lecigne of Google Threat Analysis Group, and Ian Beer of Google Project Zero
Root Cause Analysis
???
Apple fixes zero-day in iOS and iPadOS 15.0.2 emergency release: Detect and Prioritize Vulnerabilities using VMDR for Mobile Devices
Qualys
Oct 18, 2021
NSO Pegasus iPhone Spyware Vulnerabilities Fixed by Apple – Detect & Prioritize Using VMDR for Mobile Devices
Qualys
Sep 29, 2021
Apple patches new zero-day bug used to hack iPhones and Macs
BleepingComputer
Sep 23, 2021
Qualys Response to CISA Alert: Binding Operational Directive 22-01
Qualys
Nov 09, 2021
Signal Intelligence
Confidence
95%
EPSS
1.72%
Mentions
6
Last Seen
Nov 09, 2021
CNA Information
Analyst Note
Auto-imported from Google Project Zero — confirmed zero-day by definition.
Threat Actors 2
BRONZE HIGHLAND
apt_group
Information theft and espionage
🇨🇳 CN
WildPressure
apt_group
Information theft and espionage
UNKNOWN
Triage Info
Decided atMar 05, 2026