PT-2021-2536 · Apple · Webkit+3

Billy Leonard

+1

·

Published

2021-03-26

·

Updated

2025-10-23

·

CVE-2021-1879

CVSS v2.0

6.4

Medium

VectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 12.5.2 Apple iOS versions prior to 14.4.2 Apple iPadOS versions prior to 14.4.2 Apple watchOS versions prior to 7.3.3
Description: This issue is related to the WebKit module in Apple's operating systems, which may allow a remote attacker to perform cross-site scripting attacks by processing maliciously crafted web content. Apple is aware of a report that this issue may have been actively exploited. The estimated number of potentially affected devices worldwide is not specified.
Recommendations: For Apple iOS versions prior to 12.5.2, update to iOS 12.5.2 or later. For Apple iOS versions prior to 14.4.2, update to iOS 14.4.2 or later. For Apple iPadOS versions prior to 14.4.2, update to iPadOS 14.4.2 or later. For Apple watchOS versions prior to 7.3.3, update to watchOS 7.3.3 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2021-01942
CVE-2021-1879

Affected Products

Webkit
Ios
Ipados
Watchos