CVE-2021-1844

Beschreibung:
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.

CWE: CWE-119

CVSS-Bewertung
CVSS 2: MEDIUM – 6.8 (Version: 2.0)
CVSS 3: HIGH – 8.8 (Version: 3.1)

Links:

NVD – CVE-2021-1844
CVE – CVE-2021-1844

Link (max. 20) Quelle Tags
https://support.apple.com/en-us/HT212222 MISC Vendor Advisory Third Party Advisory Patch Vendor Advisory
https://support.apple.com/en-us/HT212223 MISC Vendor Advisory Third Party Advisory Vendor Advisory
https://support.apple.com/en-us/HT212220 MISC Vendor Advisory Third Party Advisory
https://support.apple.com/en-us/HT212221 MISC Vendor Advisory
FEDORA-2021-864dc37032 FEDORA Mailing List Third Party Advisory
https://support.apple.com/kb/HT212323 CONFIRM Vendor Advisory
20210427 APPLE-SA-2021-04-26-6 tvOS 14.5 FULLDISC Mailing List Third Party Advisory

Quelle: NVD – CVE-2021-1844
Datum Veröffentlichung: 2021-04-02T19:15Z, Datum letzte Änderung: 2021-05-04T19:35Z