返回 CVE 瀏覽器

CVE-2021-1879

Known Exploited (CISA KEV)MEDIUM

6.1

CVSS Severity Score

EPSS Score82.3320%

EPSS Percentile89.16th

Published2021年4月2日

Last Modified2025年10月23日

Vulnerability Description

This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited..

Affected Platforms (CPE)

💻

Apple

Ipados

< 14.4.2

💻

Apple

Iphone Os

< 12.5.2

💻

Apple

Iphone Os

>= 13.0 and < 14.4.2

💻

Apple

Watchos

< 7.3.3

References & Advisories

🔗 https://support.apple.com/en-us/HT212256

🔗 https://support.apple.com/en-us/HT212257

🔗 https://support.apple.com/en-us/HT212258

🔗 https://support.apple.com/en-us/HT212256

🔗 https://support.apple.com/en-us/HT212257

🔗 https://support.apple.com/en-us/HT212258

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1879

相關漏洞威脅

CVE-2019-877910.0

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions...

CVE-2020-39109.8

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39099.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39119.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....