CVE-2021-1879
KEVApple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
View CVE record →- Vendor / Project
- Apple
- Product
- iOS, iPadOS, and watchOS
- Date added
- Nov 3, 2021
- Due date
- Nov 17, 2021
- Known ransomware use
- Unknown
- CWEs
- CWE-79
Description
Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Required action
Apply updates per vendor instructions.