CVE-2021-1748

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

• CWE-20

• https://support.apple.com/en-us/HT212146Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212148Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212149Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212146Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212148Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212149Release Notes, Vendor Advisory

Published

Apr 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1742This issue was addressed with improved checks. This issue is…7.8
• CVE-2021-1743An out-of-bounds read was addressed with improved bounds che…7.8
• CVE-2021-1744An out-of-bounds write was addressed with improved input val…7.8
• CVE-2021-1745An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2021-1746This issue was addressed with improved checks. This issue is…7.8
• CVE-2021-1747An out-of-bounds write was addressed with improved input val…7.8
• CVE-2021-1750Multiple issues were addressed with improved logic. This iss…7.8
• CVE-2021-1751A logic issue was addressed with improved state management. …7.8
• CVE-2021-1753An out-of-bounds read was addressed with improved bounds che…7.8
• CVE-2021-1754This issue was addressed with improved checks. This issue is…7.8
• CVE-2021-1755A lock screen issue allowed access to contacts on a locked d…2.4
• CVE-2021-1756A lock screen issue allowed access to contacts on a locked d…2.4