CVE-2021-30884: Medium severity Apple tvOS vulnerability
A flaw was found in WebKitGTK. The issue was resolved with additional restrictions on CSS compositing.
References: https://webkitgtk.org/security/WSA-2021-0007.html https://www.openwall.com/lists/oss-security/2021/12/20/6
Other sources
The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously crafted website may reveal a user's browsing history.
— MITRE
WebKit. The issue was resolved with additional restrictions on CSS compositing.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tvOSto a version that resolves this vulnerability.Fixed in 15 - Upgrade
Upgrade
Apple iOS, iPadOS, and watchOSto a version that resolves this vulnerability.Fixed in 8 - Upgrade
Upgrade
macOSto a version that resolves this vulnerability.Fixed in 12.0.1 - Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 15 - Upgrade
Upgrade
Apple iOS, iPadOS, and macOSto a version that resolves this vulnerability.Fixed in 15 - Upgrade
Upgrade
redhat/webkitgtkto a version that resolves this vulnerability.Fixed in 2.34.0 - Upgrade
Upgrade
alpine/webkit2gtkto a version that resolves this vulnerability.Fixed in 2.34.0-r0 - Upgrade
Upgrade
watchOSto a version that resolves this vulnerability.Fixed in 8 - Upgrade
Upgrade
iOSto a version that resolves this vulnerability.Fixed in 15 - Upgrade
Upgrade
iPadOSto a version that resolves this vulnerability.Fixed in 15
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-30837
- CVE-2021-30838
- CVE-2021-30866
- CVE-2021-30834
- CVE-2021-30928
- CVE-2021-30831
- CVE-2021-30840
- CVE-2021-30841
- CVE-2021-30842
- CVE-2021-30843
- CVE-2021-30852
- CVE-2021-30814
- CVE-2021-30835
- CVE-2021-30847
- CVE-2021-30857
- CVE-2013-0340
- CVE-2021-30855
- CVE-2021-30854
- CVE-2021-30850
- CVE-2021-30808
- CVE-2021-30897
- CVE-2021-30884
- CVE-2021-30818
- CVE-2021-30823
- CVE-2021-30836
- CVE-2021-30809
- CVE-2021-30846
- CVE-2021-30849
- CVE-2021-30851
- CVE-2021-30810
- CVE-2021-30811
- CVE-2021-30882
- CVE-2021-30925
- CVE-2021-30873
- CVE-2021-30876
- CVE-2021-30879
- CVE-2021-30877
- CVE-2021-30880
- CVE-2021-30994
- CVE-2021-30907
- CVE-2021-30899
- CVE-2021-30931
- CVE-2021-30917
- CVE-2021-30903
- CVE-2021-30905
- CVE-2021-30919
- CVE-2020-9846
- CVE-2021-30881
- CVE-2021-30923
- CVE-2021-30895
- CVE-2021-30896
- CVE-2021-30933
- CVE-2021-30906
- CVE-2021-30867
- CVE-2021-30922
- CVE-2021-30824
- CVE-2021-30901
- CVE-2021-30821
- CVE-2021-30883
- CVE-2021-30924
- CVE-2021-30886
- CVE-2021-30909
- CVE-2021-30916
- CVE-2021-30864
- CVE-2021-30813
- CVE-2021-31011
- CVE-2021-30904
- CVE-2021-30910
- CVE-2021-30911
- CVE-2021-30874
- CVE-2021-30920
- CVE-2021-31004
- CVE-2021-31002
- CVE-2021-30868
- CVE-2021-30912
- CVE-2021-30913
- CVE-2021-30915
- CVE-2021-31005
- CVE-2021-31008
- CVE-2021-30848
- CVE-2021-30887
- CVE-2021-30888
- CVE-2021-30889
- CVE-2021-30861
- CVE-2021-30890
- CVE-2021-30930
- CVE-2021-30908
- CVE-2021-30833
- CVE-2021-30892
- CVE-2021-30825
- CVE-2021-30863
- CVE-2021-30816
- CVE-2021-30819
- CVE-2021-30898
- CVE-2021-30870
- CVE-2021-30815
- CVE-2021-31001
- CVE-2021-30826
Frequently Asked Questions
What is CVE-2021-30884 and what software is affected?
CVE-2021-30884 is a vulnerability in WebKit that affects Apple watchOS 8, Apple iOS up to version 15, Apple iPadOS up to version 15, Apple tvOS up to version 15, and Apple macOS Monterey up to version 12.0.1.
What is the severity of CVE-2021-30884?
The severity of CVE-2021-30884 is not specified.
How does CVE-2021-30884 impact CSS compositing in WebKit?
CVE-2021-30884 introduces additional restrictions on CSS compositing in WebKit to address the vulnerability.
How can I fix CVE-2021-30884?
To fix CVE-2021-30884, update your Apple watchOS to version 8 or later, Apple iOS, Apple iPadOS, Apple tvOS, or Apple macOS Monterey to version 15 or later.
Where can I find more information about CVE-2021-30884?
You can find more information about CVE-2021-30884 on Apple's official support page: [https://support.apple.com/en-us/HT212814](https://support.apple.com/en-us/HT212814)