PT-2021-7058 · Apple+8 · Watchos+14
Martin Bajanik
·
Published
2021-08-24
·
Updated
2022-05-10
·
CVE-2021-30984
CVSS v2.0
7.6
High
| Vector | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 15.2
tvOS versions prior to 15.2
macOS Monterey versions prior to 12.1
iOS versions prior to 15.2
iPadOS versions prior to 15.2
watchOS versions prior to 8.3
Description
A race condition was addressed with improved state handling. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to errors in synchronization when using shared resources in WebKitGTK and WPE WebKit modules for displaying web pages.
Recommendations
For Safari version prior to 15.2, update to version 15.2 or later.
For tvOS version prior to 15.2, update to version 15.2 or later.
For macOS Monterey version prior to 12.1, update to version 12.1 or later.
For iOS version prior to 15.2, update to version 15.2 or later.
For iPadOS version prior to 15.2, update to version 15.2 or later.
For watchOS version prior to 8.3, update to version 8.3 or later.
Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Ios
Ipados
Macos Monterey
Tvos
Watchos