A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 8.8 | High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| Product | Vendor | Version |
|---|---|---|
| iOS and iPadOS | Apple | n/a |
| macOS | Apple | WCN7850 |
| macOS | Apple | versions 4.16 through 5.37 |
| macOS | Apple | WCN7851 |
| macOS | Apple | n/a |
| iOS and iPadOS | Apple | <= 6.8.* |
| macOS | Apple | SA6155 |
| macOS | Apple | 2.5 |
| macOS | Apple | SA8145P |
| macOS | Apple | < 22.9.0 |