First published: Tue Aug 24 2021(Updated: )
The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously crafted website may reveal a user's browsing history.
Credit: an anonymous researcher cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
tvOS | <15 | 15 |
Apple iOS, iPadOS, and watchOS | <8 | 8 |
macOS | <12.0.1 | 12.0.1 |
Apple iOS and iPadOS | <15 | 15 |
Apple iOS, iPadOS, and macOS | <15 | 15 |
Apple iOS, iPadOS, and macOS | <15.0 | |
iPhone OS | <15.0 | |
macOS | <12.0.1 | |
tvOS | <15.0 | |
Apple iOS, iPadOS, and watchOS | <8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-30884 is a vulnerability in WebKit that affects Apple watchOS 8, Apple iOS up to version 15, Apple iPadOS up to version 15, Apple tvOS up to version 15, and Apple macOS Monterey up to version 12.0.1.
The severity of CVE-2021-30884 is not specified.
CVE-2021-30884 introduces additional restrictions on CSS compositing in WebKit to address the vulnerability.
To fix CVE-2021-30884, update your Apple watchOS to version 8 or later, Apple iOS, Apple iPadOS, Apple tvOS, or Apple macOS Monterey to version 15 or later.
You can find more information about CVE-2021-30884 on Apple's official support page: [https://support.apple.com/en-us/HT212814](https://support.apple.com/en-us/HT212814)