Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Billy Leonard

Researcher fromGoogle Threat Analysis Group
#42180of 53,633
6.4Total CVSS
Vulnerabilities · 1
PT-2021-2536
6.4
2021-03-26
Apple · Webkit · CVE-2021-1879
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 12.5.2 Apple iOS versions prior to 14.4.2 Apple iPadOS versions prior to 14.4.2 Apple watchOS versions prior to 7.3.3 Description: This issue is related to the WebKit module in Apple's operating systems, which may allow a remote attacker to perform cross-site scripting attacks by processing maliciously crafted web content. Apple is aware of a report that this issue may have been actively exploited. The estimated number of potentially affected devices worldwide is not specified. Recommendations: For Apple iOS versions prior to 12.5.2, update to iOS 12.5.2 or later. For Apple iOS versions prior to 14.4.2, update to iOS 14.4.2 or later. For Apple iPadOS versions prior to 14.4.2, update to iPadOS 14.4.2 or later. For Apple watchOS versions prior to 7.3.3, update to watchOS 7.3.3 or later.