CVE-2021-1871
Summary
| CVE | CVE-2021-1871 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-04-02 19:15:00 UTC |
| Updated | 2023-11-07 03:28:00 UTC |
| Description | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. |
Risk And Classification
EPSS: 0.007940000 probability, percentile 0.739000000 (date 2026-04-01)
CISA KEV: Listed on 2021-11-03; due 2021-11-17; ransomware use Unknown
Problem Types: NVD-CWE-noinfo
CISA Known Exploited Vulnerability
| Vendor | Apple |
|---|---|
| Product | iOS, iPadOS, and macOS |
| Name | Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability |
| Required Action | Apply updates per vendor instructions. |
| Notes | https://nvd.nist.gov/vuln/detail/CVE-2021-1871 |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Ipad Os | All | All | All | All |
| Operating System | Apple | Iphone Os | All | All | All | All |
| Operating System | Apple | Macos | All | All | All | All |
| Operating System | Apple | Mac Os X | All | All | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | - | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2020 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2020-001 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | supplemental_update | All | All |
| Operating System | Debian | Debian Linux | 10.0 | All | All | All |
| Operating System | Fedoraproject | Fedora | 33 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| About the security content of macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave - Apple Support | MISC | support.apple.com | |
| [SECURITY] Fedora 33 Update: webkit2gtk3-2.32.0-1.fc33 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 33 Update: webkit2gtk3-2.32.0-1.fc33 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| About the security content of iOS 14.4 and iPadOS 14.4 - Apple Support | MISC | support.apple.com | |
| Debian -- Security Information -- DSA-4923-1 webkit2gtk | DEBIAN | www.debian.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
| CISA Known Exploited Vulnerabilities catalog | CISA | www.cisa.gov | kev |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159499 Oracle Enterprise Linux Security Update for GNOME (ELSA-2021-4381)
- 174960 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2021:1430-1)
- 174986 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2021:1499-1)
- 178622 Debian Security Update for webkit2gtk (DSA 4923-1)
- 178637 Debian Security Update for webkit2gtk (DSA 4923-1)
- 180022 Debian Security Update for wpewebkitwebkit2gtk (CVE-2021-1871)
- 198357 Ubuntu Security Notification for WebKitGTK vulnerabilities (USN-4939-1)
- 239811 Red Hat Update for gnome security (RHSA-2021:4381)
- 281405 Fedora Security Update for webkit2gtk3 (FEDORA-2021-864dc37032)
- 281406 Fedora Security Update for webkit2gtk3 (FEDORA-2021-8070916f7a)
- 296068 Oracle Solaris 11.4 Support Repository Update (SRU) 34.94.4 Missing (CPUAPR2021)
- 501712 Alpine Linux Security Update for webkit2gtk
- 501940 Alpine Linux Security Update for webkit2gtk
- 505519 Alpine Linux Security Update for webkit2gtk
- 710570 Gentoo Linux WebkitGTK+ Multiple Vulnerabilities (GLSA 202202-01)
- 750239 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2021:0637-1)
- 750655 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2021:1990-1)
- 751623 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0142-1)
- 751646 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0183-1)
- 751648 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0182-1)
- 751659 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2022:0182-1)
- 751755 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2022:0182-2)
- 940070 AlmaLinux Security Update for GNOME (ALSA-2021:4381)