CVE-2021-1844: 
Apple Safari vulnerability analysis and mitigation

CVE-2021-1844 is a memory corruption vulnerability in WebKit that was discovered and disclosed in March 2021. The vulnerability affects multiple Apple products including iOS 14.4.1, iPadOS 14.4.1, Safari 14.0.3, watchOS 7.3.2, and macOS Big Sur 11.2.3. The issue was discovered by Clément Lecigne of Google's Threat Analysis Group and Alison Huffman of Microsoft Browser Vulnerability Research (Apple Support, Apple Support).

The vulnerability is a memory corruption issue in the WebKit browser engine that was addressed with improved validation. It has a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-787 (Out-of-bounds Write) (NVD).

Processing maliciously crafted web content may lead to arbitrary code execution on affected systems. This could allow attackers to execute malicious code by having users visit specially crafted web pages (Apple Support, Apple Support).

The vulnerability requires user interaction (visiting a maliciously crafted webpage) to be exploited. No information about active exploitation in the wild was reported at the time of disclosure (NVD).

Apple addressed this vulnerability by releasing security updates for affected products: iOS 14.4.1, iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, and macOS Big Sur 11.2.3. Users should update to these versions or later to mitigate the vulnerability (Apple Support, Apple Support).