CVE-2021-30758
08.09.2021, 14:15
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
| Vendor | Product | Version |
|---|---|---|
| apple | safari | 𝑥 < 14.1.2 |
| apple | iphone_os | 𝑥 < 14.7 |
| apple | macos | 𝑥 < 11.5 |
| apple | tvos | 𝑥 < 14.7 |
| apple | watchos | 𝑥 < 7.6 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| webkit2gtk |
| ||||||||||||||
| wpewebkit |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qtwebkit-opensource-src |
| ||||||||||||||||||||||
| qtwebkit-source |
| ||||||||||||||||||||||
| webkit2gtk |
| ||||||||||||||||||||||
| webkitgtk |
| ||||||||||||||||||||||
| wpewebkit |
|
References