CVE-2021-1844: High severity apple macos vulnerability

Q: What is CVE-2021-1844?

CVE-2021-1844 is a memory corruption issue in WebKit that has been addressed with improved validation.

Q: Which software is affected by CVE-2021-1844?

The following software versions are affected: Apple Safari 14.0.3, Apple iOS up to 14.4.1, Apple iPadOS up to 14.4.1, Apple watchOS up to 7.3.2, Apple macOS Big Sur up to 11.2.3, and Apple tvOS up to 14.5.

Q: How can I fix the vulnerability?

To fix the vulnerability, update your software to the following versions: Apple Safari 14.0.3, Apple iOS 14.4.1, Apple iPadOS 14.4.1, Apple watchOS 7.3.2, Apple macOS Big Sur 11.2.3, and Apple tvOS 14.5.

Q: Where can I find more information about CVE-2021-1844?

You can find more information about CVE-2021-1844 on the official Apple support page at the following links: [Link-1](https://support.apple.com/en-us/HT212222), [Link-2](https://support.apple.com/en-us/HT212220), [Link-3](https://support.apple.com/en-us/HT212221).

Published Mar 8, 2021

Updated

A flaw was found in WebKitGTK.

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: A memory corruption issue was addressed with improved validation.

Reference: https://webkitgtk.org/security/WSA-2021-0003.html

Other sources

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.

WebKit. A memory corruption issue was addressed with improved validation.

Credit

Clément Lecigne(Google), Alison Huffman(Microsoft Browser Vulnerability Research), Clément Lecigne(Google), Alison Huffman(Microsoft Browser Vulnerability Research), Clément Lecigne(Google), Alison Huffman(Microsoft Browser Vulnerability Research), Clément Lecigne(Google), Alison Huffman(Microsoft Browser Vulnerability Research), Clément Lecigne(Google), Alison Huffman(Microsoft Browser Vulnerability Research)

Affected Software

17 affected componentsFixes available

debian/webkit2gtk

2.36.4-1~deb10u12.38.6-0+deb10u12.40.5-1~deb11u12.42.1-1~deb11u22.40.5-1~deb12u12.42.1-1~deb12u12.42.1-2

debian/wpewebkit

2.38.6-1~deb11u12.38.6-12.42.1-1

Apple macOS Big Sur<11.2.3

11.2.3

Apple tvOS<14.5

14.5

Apple WatchOS<7.3.2

7.3.2

Apple Safari<14.0.3

14.0.3

Apple iOS<14.4.1

14.4.1

Apple iPadOS<14.4.1

14.4.1

Apple Safari<14.0.3

Apple iPadOS<14.4.1

Apple iPhone OS<14.4.1

Apple macOS<11.2.3

Apple tvOS<14.5

Apple WatchOS<7.3.2

Debian Debian Linux=10.0

Fedoraproject Fedora=33

redhat/webkitgtk<2.32.0

2.32.0

Event History

Mar 30, 2021

Data Sourced

via Red Hat·08:05 PM

DescriptionSeverityAffected Software

Apr 2, 2021

CVE Published

via MITRE·06:07 PM

Data Sourced

via MITRE·06:07 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is CVE-2021-1844?

CVE-2021-1844 is a memory corruption issue in WebKit that has been addressed with improved validation.

Which software is affected by CVE-2021-1844?

The following software versions are affected: Apple Safari 14.0.3, Apple iOS up to 14.4.1, Apple iPadOS up to 14.4.1, Apple watchOS up to 7.3.2, Apple macOS Big Sur up to 11.2.3, and Apple tvOS up to 14.5.

How can I fix the vulnerability?

To fix the vulnerability, update your software to the following versions: Apple Safari 14.0.3, Apple iOS 14.4.1, Apple iPadOS 14.4.1, Apple watchOS 7.3.2, Apple macOS Big Sur 11.2.3, and Apple tvOS 14.5.

Where can I find more information about CVE-2021-1844?