CVE Watch—

CVE-2021-1879

Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

CVSS

—

No CVSS

EPSS

7.1%

p94

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

6.8%EPSS · 30 days7.1%

2026-08-022026-08-31

KEV catalog record

Product

Apple / iOS, iPadOS, and watchOS

Vulnerability

Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

Nov 17, 2021

Known ransomware use

Summary description

Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-1879

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-41061—

86.9%

KEV—76Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability—CVE-2020-9818—

82.0%

KEV—75Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability—CVE-2020-9819—

81.1%

KEV—74Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability—