cbcvebase.
CVE-2021-1801
published 2021-04-02

CVE-2021-1801: This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security…

PriorityP179medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
ITWVulnCheck KEV
Exploited in the wild
EPSS
1.52%
71.7th percentile
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.

Affected

16 ranges
VendorProductVersion rangeFixed in
appleios_14.4_and_ipados
appleios_and_ipados>= unspecified < 14.414.4
appleipad_os< 14.414.4
appleiphone_os< 14.414.4
applemacos>= 11.0.1 < 11.211.2
applemacos>= unspecified < 11.211.2
applemacos>= unspecified < 7.37.3
applemacos>= unspecified < 14.414.4
applemacos_big_sur_11.2_security_update_2021-001_catalina_security_update_2021-001_mo
appletvos< 14.414.4
applewatchos< 7.37.3
debianwebkit2gtk< webkit2gtk 2.30.6-1 (bookworm)webkit2gtk 2.30.6-1 (bookworm)
debianwpewebkit< webkit2gtk 2.30.6-1 (bookworm)webkit2gtk 2.30.6-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
webkitgtkwebkitgtk< 2.30.62.30.6

Detection & IOCsextracted from sources · hover to see the quote

  • ·Vulnerability affects WebKitGTK and WPE WebKit versions prior to 2.30.6; versions 2.30.6 and later are fixed. Red Hat Enterprise Linux 9 (webkit2gtk3) is listed as not affected.
  • ·The highest threat from this vulnerability is to data integrity (not confidentiality or availability), which should inform triage prioritization.
  • ·Fixed in Debian across all tracked branches (bookworm, bullseye, forky, sid, trixie) at webkit2gtk version 2.30.6-1.

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv6.5MEDIUM
vulncheck6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.