A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Apple

iOS and iPadOS

Affected Versions:

unspecified

Apple

tvOS

Affected Versions:

unspecified

Apple

Safari

Affected Versions:

unspecified

Apple

watchOS

Affected Versions:

unspecified

Apple

macOS

Affected Versions:

unspecified

References

https://support.apple.com/en-us/HT212807

https://support.apple.com/en-us/HT212819

https://support.apple.com/en-us/HT212815

https://support.apple.com/en-us/HT212816

https://support.apple.com/en-us/HT212869

https://support.apple.com/kb/HT212953

http://www.openwall.com/lists/oss-security/2021/12/20/6

Published: 2021-10-28T18:17:07

Last Modified: 2024-08-03T22:48:13.276Z

Copied to clipboard!