CVE-2021-1801

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/
• https://security.gentoo.org/glsa/202104-03Third Party Advisory
• https://support.apple.com/en-us/HT212146Vendor Advisory
• https://support.apple.com/en-us/HT212147Vendor Advisory
• https://support.apple.com/en-us/HT212148Vendor Advisory
• https://support.apple.com/en-us/HT212149Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/
• https://security.gentoo.org/glsa/202104-03Third Party Advisory
• https://support.apple.com/en-us/HT212146Vendor Advisory
• https://support.apple.com/en-us/HT212147Vendor Advisory
• https://support.apple.com/en-us/HT212148Vendor Advisory
• https://support.apple.com/en-us/HT212149Vendor Advisory

Published

Apr 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1794An out-of-bounds read was addressed with improved input vali…9.8
• CVE-2021-1795An out-of-bounds write was addressed with improved input val…9.8
• CVE-2021-1796An out-of-bounds write was addressed with improved input val…9.8
• CVE-2021-1797The issue was addressed with improved permissions logic. Thi…5.5
• CVE-2021-1799A port redirection issue was addressed with additional port …6.5
• CVE-2021-1800A path handling issue was addressed with improved validation…5.5
• CVE-2021-1802A logic issue was addressed with improved state management. …7.8
• CVE-2021-1803The issue was addressed with improved permissions logic. Thi…3.3
• CVE-2021-1805An out-of-bounds write was addressed with improved input val…7.8
• CVE-2021-1806A race condition was addressed with additional validation. T…7
• CVE-2021-1807A validation issue was addressed with improved input sanitiz…5.5
• CVE-2021-1808A memory corruption issue was addressed with improved valida…7.5