medium6.5
CVE-2021-30897
An issue existed in the specification for the resource timing API.
Impact
An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 15.0 |
| Apple | Iphone Os | before 15.0 |
| Apple | Macos | before 12.0.1 |
| Apple | Tvos | before 15.0 |