Description
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, Safari 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | >= unspecified, < 14.8 |
| Apple | iOS and iPadOS | >= unspecified, < 15 |
| Apple | tvOS | >= unspecified, < 15 |
| Apple | Safari | >= unspecified, < 15 |
| Apple | watchOS | >= unspecified, < 8 |
References
- http://www.openwall.com/lists/oss-security/2021/12/20/6Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT212807Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212814Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212815Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212816Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212819Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT212869Vendor Advisory
- http://www.openwall.com/lists/oss-security/2021/12/20/6Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT212807Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212814Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212815Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212816Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212819Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT212869Vendor Advisory
Timeline
- Published
- Oct 28, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified