PT-2021-6451
CVE-2021-1825
·
Published
2020-11-23
·
Updated
2026-10-31
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
iTunes versions prior to 12.11.3 for Windows
iCloud for Windows versions prior to 12.3
macOS Big Sur versions prior to 11.3
Safari versions prior to 14.1
watchOS versions prior to 7.4
tvOS versions prior to 14.5
iOS versions prior to 14.5
iPadOS versions prior to 14.5
Description
The issue is related to input validation. Processing maliciously crafted web content may lead to a cross-site scripting attack.
Recommendations
For iTunes versions prior to 12.11.3 for Windows, update to version 12.11.3 or later.
For iCloud for Windows versions prior to 12.3, update to version 12.3 or later.
For macOS Big Sur versions prior to 11.3, update to version 11.3 or later.
For Safari versions prior to 14.1, update to version 14.1 or later.
For watchOS versions prior to 7.4, update to version 7.4 or later.
For tvOS versions prior to 14.5, update to version 14.5 or later.
For iOS versions prior to 14.5, update to version 14.5 or later.
For iPadOS versions prior to 14.5, update to version 14.5 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾