CRITICAL🚩 CISA KEV⚡ EXPLOIT🇵🇱 Wersja polska

CVE-2021-1870

CVSS 9.8v3.1pub. 2021-04-02upd. 2025-10-23

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Apple iPadOS
OS
Apple
< 14.4
Apple iOS
OS
Apple
< 14.4
Apple macOS
OS
Apple
11.0.1 – 11.2 (bez)
Apple Mac Os X
OS
Apple
10.15.710.15 – 10.15.7 (bez)
Fedora Project Fedora
OS
Fedoraproject
3233
Webkitgtk
APP
Webkitgtk
< 2.30.6

CISA KEV — detailsi

Vendori: Apple ↗
Producti: iOS, iPadOS, and macOS
Added to KEVi: November 3, 2021
Remediation deadline (US Federal)i: November 17, 2021(overdue)

🔧Advisory Apple↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

🔴