What’s Vulnerable › Vulnerabilities
CVE-2021-1863
- Severity: low (CVSS 2.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-09-08 · updated 2026-06-17
- Weakness: CWE-287
Description
An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number.
Affected products
- Apple iPadOS: before 14.5 — fixed in 14.5
- Apple Iphone Os: before 14.5 — fixed in 14.5
How to fix
Upgrade to a fixed version: Apple iPadOS 14.5; Apple Iphone Os 14.5. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2021-1863 or the next vulnerability affects your stack