CVE-2021-30823

Name of the Vulnerable Software and Affected Versions Safari versions prior to 15 macOS versions prior to 12.0.1 iOS versions prior to 14.8 iPadOS versions prior to 14.8 tvOS versions prior to 15 watchOS versions prior to 8

Description A logic issue was addressed with improved restrictions, allowing an attacker in a privileged network position to potentially bypass HSTS. This could impact the integrity of data.

Recommendations For Safari versions prior to 15, update to Safari 15 or later. For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1 or later. For iOS versions prior to 14.8, update to iOS 14.8 or later. For iPadOS versions prior to 14.8, update to iPadOS 14.8 or later. For tvOS versions prior to 15, update to tvOS 15 or later. For watchOS versions prior to 8, update to watchOS 8 or later.