CVE-2021-30823

6.5 mediumEPSS 2.2%

Medium (6.5) in apple. EPSS 2.2% chance of exploitation in the next 30 days.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, Safari 15, watchOS 8. An attacker in a privileged network position may be able to bypass HSTS.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published: 2021-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:ipados
apple:iphone_os
apple:macos
apple:safari
apple:tvos
apple:watchos

References

http://www.openwall.com/lists/oss-security/2021/12/20/6
https://support.apple.com/en-us/HT212807
https://support.apple.com/en-us/HT212815
https://support.apple.com/en-us/HT212816
https://support.apple.com/en-us/HT212819

Check your stack JSON