Apple Products Cross-Site Scripting Vulnerability

Release Date: 29 Mar 2021 6780 Views

RISK: High Risk

TYPE: Operating Systems - Mac OS

A vulnerability was identified in Apple products, a remote attacker could exploit this vulnerability to trigger cross-site scripting on the targeted system.

NOTE: This vulnerability is being actively exploited in the wild.

Impact

Cross-Site Scripting

System / Technologies affected

iOS
iPadOS
watchOS

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

iOS 12.5.2
iOS 14.4.2
iPadOS 14.4.2
watchOS 7.3.3

Vulnerability Identifier

CVE-2021-1879

Source

US-CERT
Apple