CVE-2021-30890: XSS

Reference Links

• https://webkitgtk.org/security/WSA-2021-0007.html
• https://security-tracker.debian.org/tracker/CVE-2021-30890
• https://support.apple.com/en-us/HT212869 (Advisory)
• https://support.apple.com/en-us/HT212875 (Advisory)
• https://support.apple.com/en-us/HT212874 (Advisory)
• http://www.openwall.com/lists/oss-security/2021/12/20/6
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
• https://support.apple.com/en-us/HT212867 (Advisory)
• https://support.apple.com/en-us/HT212876 (Advisory)
• https://www.debian.org/security/2021/dsa-5030
• https://www.debian.org/security/2021/dsa-5031
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Parent vulnerabilities

(Appears in the following advisories)

• HT212869
• HT212875
• HT212874
• HT212876
• HT212867

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-30873
• CVE-2021-30876
• CVE-2021-30879
• CVE-2021-30877
• CVE-2021-30880
• CVE-2021-30994
• CVE-2021-30907
• CVE-2021-30899
• CVE-2021-30931
• CVE-2021-30866
• CVE-2021-30917
• CVE-2021-30903
• CVE-2021-30905
• CVE-2021-30919
• CVE-2020-9846
• CVE-2021-30881
• CVE-2021-30923
• CVE-2021-30831
• CVE-2021-30840
• CVE-2021-30852
• CVE-2021-30895
• CVE-2021-30896
• CVE-2021-30933
• CVE-2021-30906
• CVE-2021-30867
• CVE-2021-30814
• CVE-2021-30922
• CVE-2021-30824
• CVE-2021-30901
• CVE-2021-30821
• CVE-2021-30883
• CVE-2021-30924
• CVE-2021-30886
• CVE-2021-30909
• CVE-2021-30916
• CVE-2021-30864
• CVE-2021-30813
• CVE-2021-31011
• CVE-2021-30904
• CVE-2021-30910
• CVE-2021-30911
• CVE-2021-30874
• CVE-2021-30808
• CVE-2021-30920
• CVE-2021-31004
• CVE-2021-31002
• CVE-2021-30868
• CVE-2021-30912
• CVE-2021-30913
• CVE-2021-30915
• CVE-2021-31005
• CVE-2021-31008
• CVE-2021-30897
• CVE-2021-30884
• CVE-2021-30818
• CVE-2021-30836
• CVE-2021-30846
• CVE-2021-30849
• CVE-2021-30848
• CVE-2021-30851
• CVE-2021-30809
• CVE-2021-30823
• CVE-2021-30887
• CVE-2021-30888
• CVE-2021-30889
• CVE-2021-30861
• CVE-2021-30890
• CVE-2021-30930
• CVE-2021-30908
• CVE-2021-30833
• CVE-2021-30892
• CVE-2021-31007
• CVE-2021-30894
• CVE-2021-30900
• CVE-2021-30914
• CVE-2021-30875
• CVE-2021-30902

Frequently Asked Questions

• What is CVE-2021-30890?

  CVE-2021-30890 is a vulnerability in WebKit that is caused by a logic issue and has been addressed with improved state management.

• Which software versions are affected by CVE-2021-30890?

  CVE-2021-30890 affects the following software versions: Apple Safari up to version 15.1, Apple macOS Monterey up to version 12.0.1, Apple iOS up to version 15.1, Apple iPadOS up to version 15.1, Apple tvOS up to version 15.1, Apple watchOS up to version 8.1.

• How severe is CVE-2021-30890?

  The severity of CVE-2021-30890 has not been specified.

• How can I fix CVE-2021-30890?

  To fix CVE-2021-30890, it is recommended to update to the latest version of the affected software. Apple has released updates to address this vulnerability.

• Where can I find more information about CVE-2021-30890?

  You can find more information about CVE-2021-30890 on the Apple support website. Here are the references: [link](https://support.apple.com/en-us/HT212867), [link](https://support.apple.com/en-us/HT212874), [link](https://support.apple.com/en-us/HT212875).