First published: Tue Jan 26 2021(Updated: )
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.
Credit: Eliya Stein ConfiantEliya Stein ConfiantEliya Stein ConfiantEliya Stein ConfiantEliya Stein Confiant product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Big Sur | <11.2 | 11.2 |
Apple Catalina | ||
Apple Mojave | ||
Apple watchOS | <7.3 | 7.3 |
Apple tvOS | <14.4 | 14.4 |
Apple iOS | <14.4 | 14.4 |
Apple iPadOS | <14.4 | 14.4 |
Apple Ipad Os | <14.4 | |
Apple iPhone OS | <14.4 | |
Apple macOS | >=11.0.1<11.2 | |
Apple tvOS | <14.4 | |
Apple watchOS | <7.3 | |
Fedoraproject Fedora | =32 | |
Fedoraproject Fedora | =33 | |
WebKitGTK WebKitGTK | <2.30.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID of this issue is CVE-2021-1801.
macOS Big Sur 11.2, Apple Catalina, Apple Mojave, watchOS up to version 7.3, iOS up to version 14.4, iPadOS up to version 14.4, tvOS up to version 14.4.
This vulnerability was addressed with improved iframe sandbox enforcement.
Yes, Apple has provided a remedy for the affected software versions.
More information about this vulnerability can be found on the Apple support website: [link1](https://support.apple.com/en-us/HT212149), [link2](https://support.apple.com/en-us/HT212147), [link3](https://support.apple.com/en-us/HT212148).