CVE-2021-1789

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-1789
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ Mailing List
https://security.gentoo.org/glsa/202104-03 Third Party Advisory
https://support.apple.com/en-us/HT212146 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212147 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212148 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212149 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212152 Release Notes Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ Mailing List
https://security.gentoo.org/glsa/202104-03 Third Party Advisory
https://support.apple.com/en-us/HT212146 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212147 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212148 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212149 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212152 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*
History

21 Nov 2024, 05:45

Type Values Removed Values Added
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Mailing List () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Mailing List
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Mailing List () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Mailing List
References () https://security.gentoo.org/glsa/202104-03 - Third Party Advisory () https://security.gentoo.org/glsa/202104-03 - Third Party Advisory
References () https://support.apple.com/en-us/HT212146 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT212146 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT212147 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT212147 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT212148 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT212148 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT212149 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT212149 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT212152 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT212152 - Release Notes, Vendor Advisory

02 Jul 2024, 17:02

Type Values Removed Values Added
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Mailing List
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Mailing List

02 Jun 2021, 13:19

Type Values Removed Values Added
CPE cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*
References (GENTOO) https://security.gentoo.org/glsa/202104-03 - (GENTOO) https://security.gentoo.org/glsa/202104-03 - Third Party Advisory
Information

Published : 2021-04-02 18:15

Updated : 2025-01-29 18:15

NVD link : CVE-2021-1789

Mitre link : CVE-2021-1789

CVE.ORG link : CVE-2021-1789

JSON object : View

Products Affected

fedoraproject

  • fedora

apple

  • iphone_os
  • watchos
  • mac_os_x
  • tvos
  • macos
  • ipados

webkitgtk

  • webkitgtk
CWE
CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')