{"vulnerability": "CVE-2021-30902", "sightings": [{"uuid": "c2bfe0e5-5124-4246-aec0-87865b846bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "published-proof-of-concept", "source": "https://t.me/cKure/7819", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Use-After-Free in Voice Control: CVE-2021-30902 Write-up\n\nhttps://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902/", "creation_timestamp": "2021-10-29T18:05:40.000000Z"}, {"uuid": "1c8176e6-ee0c-47d1-b99c-73ddaddfeb83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "seen", "source": "https://t.me/androidMalware/1353", "content": "Use-After-Free in Voice Control: CVE-2021-30902 Write-up\nhttps://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902/", "creation_timestamp": "2022-04-06T04:24:26.000000Z"}, {"uuid": "f07b89fb-87b6-491d-a209-f80a57402ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4655", "content": "#Threat_Research\n1  Use-After-Free in Voice Control:\nCVE-2021-30902 Write-up (iOS13/macOS Catalina)\nhttps://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902\n2. From Zero to Domain Admin\nhttps://thedfirreport.com/2021/11/01/from-zero-to-domain-admin", "creation_timestamp": "2021-11-02T11:03:01.000000Z"}, {"uuid": "bb04d893-af92-484e-af92-4114093b728f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1765", "content": "Use-After-Free in Voice Control: CVE-2021-30902 Write-up https://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902/", "creation_timestamp": "2026-08-03T05:00:04.924078Z"}, {"uuid": "f22b500c-4eef-4634-b6c1-538e2111a86c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1765", "content": "Use-After-Free in Voice Control: CVE-2021-30902 Write-up https://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902/", "creation_timestamp": "2026-08-04T00:00:50.407073Z"}, {"uuid": "bf4da73c-1fb2-444f-b296-bd8f8d6d945d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "seen", "source": "Telegram/pyOhsKcGiemvzG1lWpWjnKjnZ0w8lG-ivcKanBO3-Ey5csY", "content": "", "creation_timestamp": "2026-08-16T19:00:05.045872Z"}, {"uuid": "e2119d6c-9eaa-4a75-8439-579016f5fbec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "published-proof-of-concept", "source": "Telegram/pyOhsKcGiemvzG1lWpWjnKjnZ0w8lG-ivcKanBO3-Ey5csY", "content": "", "creation_timestamp": "2026-08-17T00:00:10.446650Z"}, {"uuid": "d90fb248-e998-47b1-b0e7-6cb76a51e402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "seen", "source": "https://t.me/reverseame/1765", "content": "Use-After-Free in Voice Control: CVE-2021-30902 Write-up https://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902/", "creation_timestamp": "2026-07-29T12:02:51.796499Z"}, {"uuid": "0d07f80d-ce8b-4a1d-a155-72e3313eb2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "seen", "source": "https://t.me/reverseame/1765", "content": "Use-After-Free in Voice Control: CVE-2021-30902 Write-up https://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902/", "creation_timestamp": "2026-07-30T00:02:41.826781Z"}, {"uuid": "8a4ce8ac-f956-4cb8-977b-31dc043ce6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "seen", "source": "https://t.me/cissp/4727", "content": "Offensive_security\n1. Introduction to Parent-Child Process Evasion\nhttps://mrd0x.com/introduction-to-parent-child-process-evasion\n2. Nim implementation of Process Hollowing using syscalls (PoC)\nhttps://github.com/snovvcrash/NimHollow\n\nThreat_Research\n1  Use-After-Free in Voice Control:\nCVE-2021-30902 Write-up (iOS13/macOS Catalina)\nhttps://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902\n2. From Zero to Domain Admin\ud83e\uddd0\nhttps://thedfirreport.com/2021/11/01/from-zero-to-domain-admin\n\nMalware_analysis\nDECAF Ransomware (Go)\ud83d\ude05\nhttps://blog.morphisec.com/decaf-ransomware-a-new-golang-threat-makes-its-appearance\n\nBlue_Team_Techniques\n1. MalAPI: maps Windows APIs to common techniques used by malware\ud83e\udd13\nhttps://malapi.io\n2. How the SolarWinds Hack (almost) went Undetected\ud83d\ude0e\nhttps://www.netresec.com/?page=Blog&month=2021-10&post=How-the-SolarWinds-Hack-almost-went-Undetected\n\nOffensive\nA tool for checking if MFA is enabled on multiple Microsoft Services:\ud83d\ude0e\n- MS Graph API\n- Azure Service Management API\n- MS 365 Exchange Web Services\n- MS 365 Web Portal\n- MS 365 Web Portal Using a Mobile User Agent\n- MS 365 Active Sync\n- ADFS\nhttps://github.com/dafthack/MFASweep", "creation_timestamp": "2026-09-01T17:00:36.577118Z"}, {"uuid": "2c19d33f-2170-445a-84bd-8542a0668529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "seen", "source": "https://t.me/cissp/4727", "content": "Offensive_security\n1. Introduction to Parent-Child Process Evasion\nhttps://mrd0x.com/introduction-to-parent-child-process-evasion\n2. Nim implementation of Process Hollowing using syscalls (PoC)\nhttps://github.com/snovvcrash/NimHollow\n\nThreat_Research\n1  Use-After-Free in Voice Control:\nCVE-2021-30902 Write-up (iOS13/macOS Catalina)\nhttps://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902\n2. From Zero to Domain Admin\ud83e\uddd0\nhttps://thedfirreport.com/2021/11/01/from-zero-to-domain-admin\n\nMalware_analysis\nDECAF Ransomware (Go)\ud83d\ude05\nhttps://blog.morphisec.com/decaf-ransomware-a-new-golang-threat-makes-its-appearance\n\nBlue_Team_Techniques\n1. MalAPI: maps Windows APIs to common techniques used by malware\ud83e\udd13\nhttps://malapi.io\n2. How the SolarWinds Hack (almost) went Undetected\ud83d\ude0e\nhttps://www.netresec.com/?page=Blog&month=2021-10&post=How-the-SolarWinds-Hack-almost-went-Undetected\n\nOffensive\nA tool for checking if MFA is enabled on multiple Microsoft Services:\ud83d\ude0e\n- MS Graph API\n- Azure Service Management API\n- MS 365 Exchange Web Services\n- MS 365 Web Portal\n- MS 365 Web Portal Using a Mobile User Agent\n- MS 365 Active Sync\n- ADFS\nhttps://github.com/dafthack/MFASweep", "creation_timestamp": "2026-09-02T01:04:20.668701Z"}]}