Unrated severityNVD Advisory· Published Apr 2, 2021· Updated Aug 3, 2024

CVE-2021-1748

Description

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./tvOSllm-fuzzy2 versions
= 14.4+ 1 more
- (no CPE)range: = 14.4
- (no CPE)range: unspecified
Apple Inc./Ipadosllm-fuzzy
Range: = 14.4
Apple Inc./watchOSllm-fuzzy2 versions
= 7.3+ 1 more
- (no CPE)range: = 7.3
- (no CPE)range: unspecified
Apple Inc./iOSllm-fuzzy
Range: = 14.4
Apple Inc./iOS and iPadOScpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/en-us/HT212146mitrex_refsource_MISC
support.apple.com/en-us/HT212148mitrex_refsource_MISC
support.apple.com/en-us/HT212149mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000