CVE-2021-1844

high

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References

Advisories
More

https://www.debian.org/security/2021/dsa-4923

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/

http://seclists.org/fulldisclosure/2021/Apr/55

https://support.apple.com/kb/HT212323

https://support.apple.com/en-us/HT212223

https://support.apple.com/en-us/HT212222

https://support.apple.com/en-us/HT212221

https://support.apple.com/en-us/HT212220

Details

Source: Mitre, NVD

Published: 2021-04-02

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00613