CVE-2021-1857

Katalog CVE

CVSS 6.5 · Medium EPSS 1,2%

Kerentanan Improper Initialization pada apple icloud, apple itunes +6 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may disclose sensitive user information.

Rincian

Terbit di NVD

8 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-665: Improper Initialization

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT212317 advisory vendor
• https://support.apple.com/en-us/HT212319 advisory vendor
• https://support.apple.com/en-us/HT212321 advisory vendor
• https://support.apple.com/en-us/HT212323 advisory vendor
• https://support.apple.com/en-us/HT212324 advisory vendor
• https://support.apple.com/en-us/HT212325 advisory vendor
• https://support.apple.com/en-us/HT212326 advisory vendor
• https://support.apple.com/en-us/HT212327 advisory vendor