7 matches found
mistune-patch-backport
CVE-2021-1748 Patch for iOS = 14.3 The root cause of CVE-2021-1748 is that the app trusts arbitrary data URIs and loads them in a local WebView. This tweak backports the patch for iOS = 14.3 by intercepting data: URI. Please note that there is still a powerful variant of bug. This patch doesn't...
CVE-2021-1748
A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...
CVE-2021-1748
creationtimestamp| type| source ---|---|--- 2021-08-31 18:09:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/435 2021-09-03 22:52:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/508 2021-09-03 22:57:29+00:00| published-proof-of-concept|...
CVE-2021-1748
A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...
CVE-2021-1748
A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...
CVE-2021-1748
CVE-2021-1748: A validation issue in processing a URL was fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. The vulnerability could allow arbitrary javascript execution when handling a malicious URL. Connected Apple advisories (HT212149/HT212148/HT212146) confirm the affected platforms a...
CVE-2021-1748
A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...