CVE-2021-30897

An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin.

• https://support.apple.com/en-us/HT212869
• https://support.apple.com/kb/HT212814
• https://support.apple.com/kb/HT212815
• https://support.apple.com/en-us/HT212869
• https://support.apple.com/kb/HT212814
• https://support.apple.com/kb/HT212815

Published

Aug 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30891Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-30892An inherited permissions issue was addressed with additional…5.5
• CVE-2021-30893Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-30894A memory corruption issue was addressed with improved input …7.8
• CVE-2021-30895A logic issue was addressed with improved restrictions. This…5.5
• CVE-2021-30896A logic issue was addressed with improved restrictions. This…5.5
• CVE-2021-30898An access issue was addressed with additional sandbox restri…5.5
• CVE-2021-30899A race condition was addressed with improved state handling.…7
• CVE-2021-3090Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-30900An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2021-30901Multiple out-of-bounds write issues were addressed with impr…7.8
• CVE-2021-30902A use after free issue was addressed with improved memory ma…7.8