Severity.io | CVE-2021-1765

Description

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy.

Related CPE's

o apple mac_os_x ********

o apple mac_os_x 10.14.6 -******

o apple mac_os_x 10.14.6 security_update_2019-004 ******

o apple mac_os_x 10.14.6 security_update_2019-005 ******

o apple mac_os_x 10.14.6 security_update_2019-006 ******

o apple mac_os_x 10.14.6 security_update_2019-007 ******

o apple mac_os_x 10.14.6 security_update_2020-001 ******

o apple mac_os_x 10.14.6 security_update_2020-002 ******

o apple mac_os_x 10.14.6 security_update_2020-003 ******

o apple mac_os_x 10.14.6 security_update_2020-004 ******

References

https://support.apple.com/en-us/HT212147

Release NotesVendor Advisory

FEDORA-2021-864dc37032

Mailing ListThird Party Advisory

CvssV3 impact

BaseSeverity	MEDIUM
ConfidentialityImpact	NONE
AttackComplexity	LOW
Scope	UNCHANGED
AttackVector	NETWORK
AvailabilityImpact	NONE
IntegrityImpact	HIGH
PrivilegesRequired	NONE
BaseScore	6.5
VectorString	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Version	3.1
UserInteraction	REQUIRED

CvssV2 impact

AccessComplexity	MEDIUM
ConfidentialityImpact	NONE
AvailabilityImpact	NONE
IntegrityImpact	PARTIAL
BaseScore	4.3
VectorString	AV:N/AC:M/Au:N/C:N/I:P/A:N
Version	2.0
AccessVector	NETWORK
Authentication	NONE