Not rated
CVE-2021-30823 A logic issue was addressed with improved restrictions
Description
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iOS and iPadOS 14.8 | earliest → < 14.8 | 14.8 |
| tvOS 15 | earliest → < 15 | 15 |
| Safari 15 | earliest → < 15 | 15 |
| watchOS 8 | earliest → < 8 | 8 |
| macOS 12.0 | earliest → < 12.0 | 12.0 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- [oss-security] 20211220 WebKitGTK and WPE WebKit Security Advisory WSA-2021-0007 www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of iOS and iPadOS
The 2049 CVEs of iOS and iPadOS →
CVE-2026-86925
An authorization issue was addressed with improved state management
5.5
Medium
CVE-2026-84627
A buffer overflow was addressed with improved bounds checking
7.8
High
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-113912
An out-of-bounds access issue was addressed with improved bounds checking
7.1
High