VYPR
← All advisories
High severity8.8NVD Advisory· Published Apr 2, 2021· Updated Jun 17, 2026

CVE-2021-1748

CVE-2021-1748

Description

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Apple Inc./Ipados2 versions
    cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <14.4
    • (no CPE)range: =14.4
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <14.4
  • Apple Inc./tvOS3 versions
    cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <14.4
    • (no CPE)range: =14.4
    • (no CPE)range: unspecified
  • Apple Inc./watchOS3 versions
    cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <7.3
    • (no CPE)range: =7.3
    • (no CPE)range: unspecified
  • Apple Inc./iOSllm-fuzzy
    Range: =14.4
  • Apple Inc./iOS and iPadOScpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.