Vulnerability CVE-2021-1857
Published: 2021-09-08

Description:
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may disclose sensitive user information.

Type:

CWE-665

 (Improper Initialization)

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Apple -> Icloud 
Apple -> Itunes 
Apple -> Ipados 
Apple -> Iphone os 
Apple -> Mac os x 
Apple -> Macos 
Apple -> TVOS 
Apple -> Watchos 

 References:
https://support.apple.com/en-us/HT212321
https://support.apple.com/en-us/HT212319
https://support.apple.com/en-us/HT212327
https://support.apple.com/en-us/HT212317
https://support.apple.com/en-us/HT212325
https://support.apple.com/en-us/HT212326
https://support.apple.com/en-us/HT212323
https://support.apple.com/en-us/HT212324
Copyright 2024, cxsecurity.com

 

Back to Top