{"metadata": {"vulnerability": "cve-2021-1782", "count": 85, "kinds": {"milestone": 7, "sighting": 35, "kev": 11, "other": 32}}, "data": [{"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-1782", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-01-26T19:50:53Z", "date_only": false, "value": "2021-01-26T19:50:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/alexmakus/3855", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "01388115-265d-40e5-a087-e599a6cc33bf", "content": "iOS 14.4 and iPadOS 14.4\nReleased January 26, 2021\nKernel\nAvailable for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation)\nImpact: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited.\nDescription: A race condition was addressed with improved locking.\nCVE-2021-1782: an anonymous researcher\n\nApple is aware of a report that this issue may have been actively exploited.\n\n\nthis issue may have been actively exploited.\n\nhttps://support.apple.com/en-us/HT212146", "url": "https://t.me/alexmakus/3855"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": false, "value": "2021-01-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_release_date.data.7.date"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": false, "value": "2021-01-27T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-062", "record": "CERTFR-2021-AVI-062", "field": "last_revision_date"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": false, "value": "2021-01-27T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-062", "record": "CERTFR-2021-AVI-062", "field": "initial_release_date"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": false, "value": "2021-01-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-062", "record": "CERTFR-2021-AVI-062", "field": "revisions.0.revision_date"}, {"timestamp": "2021-01-27T04:00:00Z", "date_only": false, "value": "2021-01-27T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=543", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "fd61bed5-759d-4d47-abd6-2cb52bdd4c12", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=543"}, {"timestamp": "2021-01-27T14:07:26Z", "date_only": false, "value": "2021-01-27T14:07:26", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_release_date.data.6.date"}, {"timestamp": "2021-01-27T14:08:57Z", "date_only": false, "value": "2021-01-27T14:08:57", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-01-27T14:09:51Z", "date_only": false, "value": "2021-01-27T14:09:51", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-02-02T00:00:00Z", "date_only": false, "value": "2021-02-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-072", "record": "CERTFR-2021-AVI-072", "field": "last_revision_date"}, {"timestamp": "2021-02-02T00:00:00Z", "date_only": false, "value": "2021-02-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-072", "record": "CERTFR-2021-AVI-072", "field": "initial_release_date"}, {"timestamp": "2021-02-02T00:00:00Z", "date_only": false, "value": "2021-02-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-072", "record": "CERTFR-2021-AVI-072", "field": "revisions.0.revision_date"}, {"timestamp": "2021-02-02T16:08:52Z", "date_only": false, "value": "2021-02-02T16:08:52", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_release_date.data.5.date"}, {"timestamp": "2021-02-02T16:09:50Z", "date_only": false, "value": "2021-02-02T16:09:50", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-02-15T06:56:29Z", "date_only": false, "value": "2021-02-15T06:56:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2694", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "6ab097a0-8d06-46f9-955a-53463a971bcc", "content": "#Threat_Research\nAnalysis and exploitation of the iOS\\iPadOS 14.3 kernel LPE vulnerability (PoC for CVE-2021-1782)\nhttps://github.com/ModernPwner/cicuta_virosa", "url": "https://t.me/CyberSecurityTechnologies/2694"}, {"timestamp": "2021-02-15T11:00:19Z", "date_only": false, "value": "2021-02-15T11:00:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2708", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "75c7716c-e2ea-44ce-ab00-072090f14ee3", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 8-14)\nCVE-2020-1472 - Microsoft Zerologon\nhttps://t.me/cybersecuritytechnologies/1742\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT in targeted attack\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2020-2037 - Palo Alto PAN-OS vulnerability\nhttps://t.me/cybersecuritytechnologies/2687\nCVE-2021-24074, CVE-2021-24086, CVE-2021-24094 - Windows IPv4/IPv6 Stack RCE/DoS Vulnerabilities\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE vulnerability\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-21017 - Acrobat Reader DC\u00a0a heap-based buffer overflow vulnerability\nhttps://threatpost.com/critical-adobe-windows-flaw/163789\nCVE-2020-24581 - D-Link DSL-2888A AU_2.31_V1x - RCE\nhttps://t.me/cybersecuritytechnologies/2670", "url": "https://t.me/CyberSecurityTechnologies/2708"}, {"timestamp": "2021-03-01T11:00:27Z", "date_only": false, "value": "2021-03-01T11:00:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2807", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "f253d78e-dee0-4f29-8cbd-534543fc0703", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 22-28)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-21972 - VMware vCenter RCE\nhttps://swarm.ptsecurity.com/unauth-rce-vmware/#more-2477\nhttps://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC\nhttps://github.com/NS-Sp4ce/CVE-2021-21972\nhttps://github.com/yaunsky/CVE-2021-21972\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-3177 - Python3 Buffer Overflow\nhttps://t.me/cybersecuritytechnologies/2740\nCVE-2021-21973 - VMware vCenter SSRF\nhttps://mobile.twitter.com/osama_hroot/status/1365586206982082560/photo/1\nCVE-2017-0005 - Windows GDI EoP\nhttps://t.me/cybersecuritytechnologies/443\nCVE-2021-24093 - Win Graph. Component RCE\nhttps://t.me/cybersecuritytechnologies/2806\nCVE-2021-25281/25282 - SaltStack Exploit\nhttps://github.com/Immersive-Labs-Sec/CVE-2021-25281\nCVE-2018-19518 - PHP IMAP Vuln.\nhttps://t.me/cybersecuritytechnologies/1649", "url": "https://t.me/CyberSecurityTechnologies/2807"}, {"timestamp": "2021-03-02T06:07:59Z", "date_only": false, "value": "2021-03-02T06:07:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/4137", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "1d2dcd3d-f49b-42c2-9440-064e4215ad03", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-1782: Hackers release a new jailbreak tool for almost every iPhone.\n\nhttps://techcrunch.com/2021/03/01/hackers-unc0ver-jailbreak-iphone/", "url": "https://t.me/cKure/4137"}, {"timestamp": "2021-03-03T05:37:03Z", "date_only": false, "value": "2021-03-03T05:37:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2815", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "0cdd08a1-d6c6-4528-b1d1-ba5aef8e5429", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (feb 1-28)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-21972 - VMware vCenter RCE\nhttps://swarm.ptsecurity.com/unauth-rce-vmware/#more-2477\nhttps://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC\nhttps://github.com/NS-Sp4ce/CVE-2021-21972\nhttps://github.com/yaunsky/CVE-2021-21972\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2021-24074, CVE-2021-24094, CVE-2021-24086 - Windows IPv4/IPv6 Stack RCE/DoS Vulnerabilities\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday", "url": "https://t.me/CyberSecurityTechnologies/2815"}, {"timestamp": "2021-04-02T00:00:00Z", "date_only": false, "value": "2021-04-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-04-02T17:59:21Z", "date_only": false, "value": "2021-04-02T17:59:21.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-1782", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-04-02T17:59:21Z", "date_only": false, "value": "2021-04-02T17:59:21.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "cve-2021-1782", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-04-02T18:15:00Z", "date_only": false, "value": "2021-04-02T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-22JF-974V-HF7J", "record": "GHSA-22JF-974V-HF7J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-04-02T18:15:21.373Z", "date_only": false, "value": "2021-04-02T18:15:21.373000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_release_date.data.8.date"}, {"timestamp": "2021-04-02T18:15:21.373Z", "date_only": false, "value": "2021-04-02T18:15:21.373", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1782", "record": "FKIE_CVE-2021-1782", "field": "published"}, {"timestamp": "2021-04-02T18:15:21.373Z", "date_only": false, "value": "2021-04-02T18:15:21.373", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-1782", "record": "GSD-2021-1782", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-04-09T00:00:00Z", "date_only": false, "value": "2021-04-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_update_date.data.2.date"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-1782", "field": "timestamps.asserted_at", "uuid": "aa6c9a7f-881e-445e-a6ed-dd6799b53a7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-1782", "field": "timestamps.asserted_at", "uuid": "fcb119a6-716d-4483-a1dc-591452b8c3da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-1782", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-1782", "record": "GSD-2021-1782", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-1782", "field": "evidence.0.details.added_date", "uuid": "fcb119a6-716d-4483-a1dc-591452b8c3da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-1782", "field": "evidence.0.details.date_added", "uuid": "aa6c9a7f-881e-445e-a6ed-dd6799b53a7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-1782", "field": "timestamps.first_seen_at", "uuid": "aa6c9a7f-881e-445e-a6ed-dd6799b53a7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-1782", "field": "timestamps.first_seen_at", "uuid": "fcb119a6-716d-4483-a1dc-591452b8c3da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-1782", "field": "status.status_updated_at", "uuid": "aa6c9a7f-881e-445e-a6ed-dd6799b53a7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-1782", "field": "status.status_updated_at", "uuid": "fcb119a6-716d-4483-a1dc-591452b8c3da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-1782", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:17Z", "date_only": false, "value": "2021-11-08T08:58:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "589eab34-b4b2-4f49-b86f-bb828fb8c33a"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-1782", "field": "evidence.0.details.due_date", "uuid": "aa6c9a7f-881e-445e-a6ed-dd6799b53a7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-1782", "record": "GSD-2021-1782", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "92e421fd-2c29-4000-9522-fac46e98549e"}, {"timestamp": "2022-04-14T17:29:43Z", "date_only": false, "value": "2022-04-14T17:29:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/1510", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "61c7b9d8-c89b-4af3-9c59-77336e1387d4", "content": "CVE-2021-1782, an iOS in-the-wild vulnerability in vouchers\n\nhttps://googleprojectzero.blogspot.com/2022/04/cve-2021-1782-ios-in-wild-vulnerability.html", "url": "https://t.me/androidMalware/1510"}, {"timestamp": "2022-04-14T18:06:42Z", "date_only": false, "value": "2022-04-14T18:06:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/50296", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "839694b4-484e-498c-a606-0e7474b06035", "content": "CVE-2021-1782, an iOS in-the-wild vulnerability in vouchers\n\nhttps://ift.tt/tgksRDx", "url": "https://t.me/ctinow/50296"}, {"timestamp": "2022-04-14T20:31:25Z", "date_only": false, "value": "2022-04-14T20:31:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thebugbountyhunter/6166", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "412def0e-aeaf-4938-9639-d312ddb630af", "content": "CVE-2021-1782, an iOS in-the-wild vulnerability in vouchers\n\nhttps://googleprojectzero.blogspot.com/2022/04/cve-2021-1782-ios-in-wild-vulnerability.html", "url": "https://t.me/thebugbountyhunter/6166"}, {"timestamp": "2022-04-15T22:53:32Z", "date_only": false, "value": "2022-04-15T22:53:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1940", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "d12a245c-82ba-42e9-9ce8-b8286b4b4dc4", "content": "#exploit\n+ CVE-2022-28345:\nSignal client for iOS < 5.33.2 are vulnerable to RTLO Injection URI Spoofing using malicious URLs\nhttps://sick.codes/sick-2022-42\n\n+ CVE-2021-1782:\nan iOS in-the-wild vulnerability in vouchers\nhttps://googleprojectzero.blogspot.com/2022/04/cve-2021-1782-ios-in-wild-vulnerability.html\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1940"}, {"timestamp": "2022-04-15T23:44:05Z", "date_only": false, "value": "2022-04-15T23:44:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5812", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "944e1bed-2148-4e84-b894-f6241937c873", "content": "#exploit\n1. CVE-2022-28345:\nSignal client for iOS < 5.33.2 are vulnerable to RTLO Injection URI Spoofing using malicious URLs\nhttps://sick.codes/sick-2022-42\n\n2. CVE-2021-1782:\nan iOS in-the-wild vulnerability in vouchers\nhttps://googleprojectzero.blogspot.com/2022/04/cve-2021-1782-ios-in-wild-vulnerability.html", "url": "https://t.me/CyberSecurityTechnologies/5812"}, {"timestamp": "2022-04-27T11:03:23Z", "date_only": false, "value": "2022-04-27T11:03:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/androidMalware/1514", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "c899a881-2045-4819-b9ff-bcb68a1b0419", "content": "A Year in Review of 0-days Used In-the-Wild in 2021 by Google\nIn 2021 there were 7 #Android in-the-wild 0-days detected and disclosed:\n - Qualcomm Adreno GPU driver (CVE-2020-11261, CVE-2021-1905, CVE-2021-1906)\n - ARM Mali GPU driver (CVE-2021-28663, CVE-2021-28664)\n - Upstream Linux kernel (CVE-2021-1048, CVE-2021-0920)\n\nFor the 5 total #iOS and macOS in-the-wild 0-days, they targeted 3 different attack surfaces:\n - IOMobileFrameBuffer (CVE-2021-30807, CVE-2021-30883)\n - XNU Kernel (CVE-2021-1782 & CVE-2021-30869)\n - CoreGraphics (CVE-2021-30860)\n - CommCenter (FORCEDENTRY sandbox escape - CVE requested, not yet assigned)\nhttps://googleprojectzero.blogspot.com/2022/04/the-more-you-know-more-you-know-you.html", "url": "https://t.me/androidMalware/1514"}, {"timestamp": "2022-05-24T17:46:20Z", "date_only": false, "value": "2022-05-24T17:46:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-22JF-974V-HF7J", "record": "GHSA-22JF-974V-HF7J", "field": "published"}, {"timestamp": "2023-12-13T01:23:21.839Z", "date_only": false, "value": "2023-12-13T01:23:21.839160Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-1782", "record": "GSD-2021-1782", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-09T00:00:00Z", "date_only": false, "value": "2024-02-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_update_date.data.1.date"}, {"timestamp": "2024-02-09T00:41:25.647Z", "date_only": false, "value": "2024-02-09T00:41:25.647", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-1782", "record": "GSD-2021-1782", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-09T18:10:13.264Z", "date_only": false, "value": "2024-02-09T18:10:13.264718Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-1782", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-02-09T18:10:13.264Z", "date_only": false, "value": "2024-02-09T18:10:13.264718Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1782", "record": "FKIE_CVE-2021-1782", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-03T16:25:06.652Z", "date_only": false, "value": "2024-08-03T16:25:06.652Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-1782", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:24:49.456Z", "date_only": false, "value": "2024-12-24T20:24:49.456925Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971139", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "ac0ff8e5-e72c-49b9-9718-ff31578cb197", "url": "https://feedsin.space/feed/CISAKevBot/items/2971139"}, {"timestamp": "2025-02-06T02:39:12Z", "date_only": false, "value": "2025-02-06T02:39:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/uXNSufdrEmM7o14q4Rz7J6PjMjMOzTBuICNU0Exja-ioUhk-", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "712362ac-ceac-42fe-8178-f334ab7ace9c"}, {"timestamp": "2025-02-23T02:09:51Z", "date_only": false, "value": "2025-02-23T02:09:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "6216f9f3-8941-4195-8aff-ee3bf411bc2a"}, {"timestamp": "2025-03-02T11:45:36Z", "date_only": false, "value": "2025-03-02T11:45:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/FnK_tjcv4bvpPL4uo0YM-eTcNi7nXwbzPuFwoqnErA6Q0SDV", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "3f2ea72f-1ea9-448f-981a-154b740b5079"}, {"timestamp": "2025-10-21T23:25:50.291Z", "date_only": false, "value": "2025-10-21T23:25:50.291Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-1782", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:50.291Z", "date_only": false, "value": "2025-10-21T23:25:50.291Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-1782", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:05Z", "date_only": false, "value": "2025-10-22T00:32:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-22JF-974V-HF7J", "record": "GHSA-22JF-974V-HF7J", "field": "modified"}, {"timestamp": "2025-10-23T18:01:51.843Z", "date_only": false, "value": "2025-10-23T18:01:51.843000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "sources_update_date.data.3.date"}, {"timestamp": "2025-11-18T14:18:25.759Z", "date_only": false, "value": "2025-11-18T14:18:25.759000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202104-0647", "record": "VAR-202104-0647", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:28:37.128Z", "date_only": false, "value": "2026-02-02T12:28:37.128436Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78530407-56d0-47a6-aa0e-30eb263688ba", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "c588a1ed-fb1f-43fa-aca0-f80abad5ff68", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78530407-56d0-47a6-aa0e-30eb263688ba"}, {"timestamp": "2026-02-02T12:28:37.128Z", "date_only": false, "value": "2026-02-02T12:28:37.128436Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78530407-56d0-47a6-aa0e-30eb263688ba", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "aa01a6f9-c6c3-4ce3-a182-4835656c9141", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/78530407-56d0-47a6-aa0e-30eb263688ba"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-1782", "field": "timestamps.recorded_at", "uuid": "aa6c9a7f-881e-445e-a6ed-dd6799b53a7c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-17T14:51:21.492Z", "date_only": false, "value": "2026-03-17T14:51:21.492192Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=543", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "7fd06c24-e23b-4143-ab15-6c3455f7c30d", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=543"}, {"timestamp": "2026-06-17T03:32:33.030Z", "date_only": false, "value": "2026-06-17T03:32:33.030", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-1782", "record": "FKIE_CVE-2021-1782", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:55.916Z", "date_only": false, "value": "2026-06-19T12:47:55.916391Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0acd80b2-9690-42ed-99a0-adc584d3aaca", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "0a9787ea-315c-4dec-a3e8-6c64efbec54f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0acd80b2-9690-42ed-99a0-adc584d3aaca"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-1782", "field": "timestamps.recorded_at", "uuid": "fcb119a6-716d-4483-a1dc-591452b8c3da", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:23.520Z", "date_only": false, "value": "2026-06-23T11:13:23.520105Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fcb119a6-716d-4483-a1dc-591452b8c3da", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "56b0bbf9-0e89-4a43-b8ab-3cf40934e7e2", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fcb119a6-716d-4483-a1dc-591452b8c3da"}, {"timestamp": "2026-06-23T14:04:47.639Z", "date_only": false, "value": "2026-06-23T14:04:47.639609Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a73d3992-d135-414a-ba70-f494a790ed75", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "39be93ef-e890-495d-97d4-34e7f66ee860", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a73d3992-d135-414a-ba70-f494a790ed75"}, {"timestamp": "2026-07-29T12:03:00.037Z", "date_only": false, "value": "2026-07-29T12:03:00.037314Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/899", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "f02f4b96-e3c7-4444-a74b-a321bef46415", "url": "https://t.me/reverseame/899"}, {"timestamp": "2026-07-29T12:03:13.452Z", "date_only": false, "value": "2026-07-29T12:03:13.452792Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/599", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "99c8dde4-6cb0-440d-bbd8-10e10efbbe04", "url": "https://t.me/cisoclub/599"}, {"timestamp": "2026-07-30T00:02:49.513Z", "date_only": false, "value": "2026-07-30T00:02:49.513817Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/899", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "7e525011-ff30-42a6-832b-bc27ba1c8d8a", "url": "https://t.me/reverseame/899"}, {"timestamp": "2026-07-30T00:03:00.006Z", "date_only": false, "value": "2026-07-30T00:03:00.006106Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/599", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "5ebf3bec-ee67-476a-b4e4-df67405a8c3d", "url": "https://t.me/cisoclub/599"}, {"timestamp": "2026-08-03T13:23:47.919Z", "date_only": false, "value": "2026-08-03T13:23:47.919634Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/899", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "8e70333f-c04c-499f-950f-eed0cdb7aa29", "url": "https://t.me/reverseame/899"}, {"timestamp": "2026-08-03T23:00:13.604Z", "date_only": false, "value": "2026-08-03T23:00:13.604910Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/599", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "cc2a9681-d381-4140-9f97-70880f392a2e", "url": "https://t.me/cisoclub/599"}, {"timestamp": "2026-08-04T00:00:10.510Z", "date_only": false, "value": "2026-08-04T00:00:10.510987Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/599", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "1b1f753c-79bc-4b79-96b1-030df583e561", "url": "https://t.me/cisoclub/599"}, {"timestamp": "2026-08-04T00:00:39.690Z", "date_only": false, "value": "2026-08-04T00:00:39.690474Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/899", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "1693a605-bb7b-4675-be92-96c77c945d61", "url": "https://t.me/reverseame/899"}, {"timestamp": "2026-08-16T19:00:04.489Z", "date_only": false, "value": "2026-08-16T19:00:04.489139Z", "kind": "sighting", "label": "Seen", "source": "Telegram/p30XQIL-O607I6diIGuFjwjGjP4Id98_xmQrzHQSzA7MMCs", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "288fa1a0-6dca-470b-bb5d-4079ca33e1ef"}, {"timestamp": "2026-08-17T00:00:11.091Z", "date_only": false, "value": "2026-08-17T00:00:11.091917Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/p30XQIL-O607I6diIGuFjwjGjP4Id98_xmQrzHQSzA7MMCs", "record": "CVE-2021-1782", "field": "creation_timestamp", "uuid": "d9fd6402-12a4-4f59-a94a-0d86fe06b9bb"}]}