CVE-2021-1789

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

• CWE-843
• CWE-843

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/Broken Link, Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/Broken Link, Mailing List
• https://security.gentoo.org/glsa/202104-03Third Party Advisory
• https://support.apple.com/en-us/HT212146Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212147Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212148Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212149Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212152Release Notes, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/Broken Link, Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/Broken Link, Mailing List
• https://security.gentoo.org/glsa/202104-03Third Party Advisory
• https://support.apple.com/en-us/HT212146Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212147Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212148Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212149Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT212152Release Notes, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1789US Government Resource

Published

Apr 2, 2021

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1783An access issue was addressed with improved memory managemen…7.8
• CVE-2021-1784A permissions issue existed in DiskArbitration. This was add…7.5
• CVE-2021-1785An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2021-1786A logic issue was addressed with improved state management. …5.5
• CVE-2021-1787Multiple issues were addressed with improved logic. This iss…7.8
• CVE-2021-1788A use after free issue was addressed with improved memory ma…8.8
• CVE-2021-1790An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2021-1791An out-of-bounds read issue existed that led to the disclosu…5.5
• CVE-2021-1792An out-of-bounds read was addressed with improved bounds che…8.8
• CVE-2021-1793This issue was addressed with improved checks. This issue is…7.8
• CVE-2021-1794An out-of-bounds read was addressed with improved input vali…9.8
• CVE-2021-1795An out-of-bounds write was addressed with improved input val…9.8