Known Exploited Vulnerabilities November 03, 2021 · CISA KEV Catalog

CVE-2021-1879: Apple iOS, iPadOS, and watchOS Web Kit Cross-Site Scripting (XSS) Vulnerability

Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Apple CVE-2021-1879
Related: CVE-2024-27834: Apple Multiple Products Improper Authentication Vulnerability Known Exploited Vulnerabilities · Nov 04, 2026
CVE-2026-86950: Apple Multiple Products Out-of-Bounds Write Vulnerability Known Exploited Vulnerabilities · Sep 29, 2026
CVE-2026-65400: Apple macOS Improper Authentication Vulnerability Known Exploited Vulnerabilities · Aug 18, 2026