CVE-2021-30888

An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1. A malicious website using Content Security Policy reports may be able to leak information via redirect behavior .

• CWE-601

• http://www.openwall.com/lists/oss-security/2021/12/20/6
• https://support.apple.com/en-us/HT212867
• https://support.apple.com/en-us/HT212868
• https://support.apple.com/en-us/HT212869
• https://support.apple.com/en-us/HT212874
• https://support.apple.com/en-us/HT212876
• http://www.openwall.com/lists/oss-security/2021/12/20/6
• https://support.apple.com/en-us/HT212867
• https://support.apple.com/en-us/HT212868
• https://support.apple.com/en-us/HT212869
• https://support.apple.com/en-us/HT212874
• https://support.apple.com/en-us/HT212876

Published

Aug 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30882A logic issue was addressed with improved validation. This i…7.5
• CVE-2021-30883A memory corruption issue was addressed with improved memory…7.8
• CVE-2021-30884The issue was resolved with additional restrictions on CSS c…4.7
• CVE-2021-30885Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-30886A use after free issue was addressed with improved memory ma…7.8
• CVE-2021-30887A logic issue was addressed with improved restrictions. This…6.5
• CVE-2021-30889A buffer overflow issue was addressed with improved memory h…8.8
• CVE-2021-30890A logic issue was addressed with improved state management. …6.1
• CVE-2021-30891Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-30892An inherited permissions issue was addressed with additional…5.5
• CVE-2021-30893Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-30894A memory corruption issue was addressed with improved input …7.8