CVE-2021-1870

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/	Mailing List Broken Link
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/	Mailing List Broken Link
https://security.gentoo.org/glsa/202104-03	Third Party Advisory
https://support.apple.com/en-us/HT212146	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212147	Release Notes Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/	Mailing List Broken Link
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/	Mailing List Broken Link
https://security.gentoo.org/glsa/202104-03	Third Party Advisory
https://support.apple.com/en-us/HT212146	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212147	Release Notes Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1870	US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:mac_os_x::::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:-::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update::::::
	cpe:2.3:o:apple:macos::::::::

Configuration 2 (hide)

cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*

Configuration 3 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:32:::::::*
	cpe:2.3:o:fedoraproject:fedora:33:::::::*

History

23 Oct 2025, 18:01

Type	Values Removed	Values Added
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Mailing List~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Mailing List, Broken Link
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Mailing List~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Mailing List, Broken Link
References	~~() https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1870 -~~	() https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1870 - US Government Resource

22 Oct 2025, 00:17

Type	Values Removed	Values Added
References		() https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1870 -

21 Oct 2025, 20:18

Type	Values Removed	Values Added
References	~~{'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1870', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}~~

21 Oct 2025, 19:18

Type	Values Removed	Values Added
References		() https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1870 -
References	~~() https://support.apple.com/en-us/HT212146 - Vendor Advisory, Release Notes~~	() https://support.apple.com/en-us/HT212146 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/HT212147 - Vendor Advisory, Release Notes~~	() https://support.apple.com/en-us/HT212147 - Release Notes, Vendor Advisory

28 Feb 2025, 14:44

Type	Values Removed	Values Added
CPE	cpe:2.3:o:apple:ipad_os::::::::	cpe:2.3:o:apple:ipados::::::::
First Time		Apple ipados
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Release Notes~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Mailing List
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Release Notes~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Mailing List
References	~~() https://support.apple.com/en-us/HT212146 - Vendor Advisory~~	() https://support.apple.com/en-us/HT212146 - Vendor Advisory, Release Notes
References	~~() https://support.apple.com/en-us/HT212147 - Vendor Advisory~~	() https://support.apple.com/en-us/HT212147 - Vendor Advisory, Release Notes

21 Nov 2024, 05:45

Type	Values Removed	Values Added
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Release Notes~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Release Notes
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Release Notes~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Release Notes
References	~~() https://security.gentoo.org/glsa/202104-03 - Third Party Advisory~~	() https://security.gentoo.org/glsa/202104-03 - Third Party Advisory
References	~~() https://support.apple.com/en-us/HT212146 - Vendor Advisory~~	() https://support.apple.com/en-us/HT212146 - Vendor Advisory
References	~~() https://support.apple.com/en-us/HT212147 - Vendor Advisory~~	() https://support.apple.com/en-us/HT212147 - Vendor Advisory

26 Jul 2024, 20:01

Type	Values Removed	Values Added
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ -~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - Release Notes
References	~~() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ -~~	() https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - Release Notes

02 Jun 2021, 13:21

Type	Values Removed	Values Added
CPE		cpe:2.3:a:webkitgtk:webkitgtk:::::::: cpe:2.3:o:fedoraproject:fedora:33:::::::* cpe:2.3:o:fedoraproject:fedora:32:::::::*
References	~~(GENTOO) https://security.gentoo.org/glsa/202104-03 -~~	(GENTOO) https://security.gentoo.org/glsa/202104-03 - Third Party Advisory

Information

Published : 2021-04-02 19:15

Updated : 2025-10-23 18:01

NVD link : CVE-2021-1870

Mitre link : CVE-2021-1870

CVE.ORG link : CVE-2021-1870

JSON object : View

Products Affected

apple

mac_os_x
ipados
macos
iphone_os

webkitgtk

webkitgtk

fedoraproject

fedora

CWE

NVD-CWE-noinfo

9.8 /10