medium4.7
CVE-2021-30884
The issue was resolved with additional restrictions on CSS compositing.
Impact
The issue was resolved with additional restrictions on CSS compositing. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Visiting a maliciously crafted website may reveal a user's browsing history.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 15.0 |
| Apple | Iphone Os | before 15.0 |
| Apple | Macos | before 12.0.1 |
| Apple | Tvos | before 15.0 |
| Apple | Watchos | before 8.0 |
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2021/12/20/6
- https://support.apple.com/en-us/HT212814
- https://support.apple.com/en-us/HT212815
- https://support.apple.com/en-us/HT212819
- https://support.apple.com/kb/HT212869
- http://www.openwall.com/lists/oss-security/2021/12/20/6
- https://support.apple.com/en-us/HT212814
- https://support.apple.com/en-us/HT212815
- https://support.apple.com/en-us/HT212819
- https://support.apple.com/kb/HT212869