CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-04-02
Apple iOS, iPadOS, and watchOS WebKit Universal Cross-Site Scripting (UXSS) Vulnerability (CVE-2021-1879) Analysis and Mitigation Guide
[Affected Scope] Apple devices running iOS versions prior to 12.5.2, iOS versions prior to 14.4.2, iPadOS versions prior to 14.4.2, and watchOS versions prior to 7.3.3
[Impact] Processing maliciously crafted web content can bypass the Same-Origin Policy (SOP), leading to Universal Cross-Site Scripting (UXSS) and arbitrary script execution, which has been actively exploited in the wild
[Mitigation] Immediately update affected devices to the patched versions: iOS 12.5.2, iOS 14.4.2, iPadOS 14.4.2, watchOS 7.3.3, or later