CVE-2021-1799

MEDIUM

6.5

CVSS Score

Published: April 2, 2021 at 06:04 PM UTC

Updated: June 17, 2026 at 03:32 AM UTC

8 products affected across 3 vendorsmacOSFedoraiPhone OS

Using iOS and iPadOS by Apple?

Get instant alerts when new vulnerabilities affect iOS and iPadOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.5

Exploit prediction

EPSS 2%

Description

A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access restricted ports on arbitrary servers.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

iPadOS · Apple

95%

v < 14.4

Affected range stops below 14.4, so it looks safe — our inference, not a vendor statement

iPhone OS · Apple

95%

v < 14.4

Affected range stops below 14.4, so it looks safe — our inference, not a vendor statement

macOS · Apple

95%

v < 11.2v < 14.0v < 14.4v < 7.311.0.1 ≤ v < 11.2

Affected range stops below 11.2, so it looks safe — our inference, not a vendor statement

Affected range stops below 14.0, so it looks safe — our inference, not a vendor statement

Affected range stops below 14.4, so it looks safe — our inference, not a vendor statement

Affected range stops below 7.3, so it looks safe — our inference, not a vendor statement

Safari · Apple

95%

v < 14.0.3

Affected range stops below 14.0.3, so it looks safe — our inference, not a vendor statement

tvOS · Apple

95%

v < 14.4

Affected range stops below 14.4, so it looks safe — our inference, not a vendor statement

watchOS · Apple

95%

v < 7.3

Affected range stops below 7.3, so it looks safe — our inference, not a vendor statement

Fedora · Fedora Projectrpm

95%

32 33

WebKitGTK · Webkitgtk

95%

v < 2.30.6

Affected range stops below 2.30.6, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (8)

Vendor Advisoryx_refsource_FEDORA

Source: [email protected]

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/

Vendor Advisoryx_refsource_FEDORA

Source: [email protected]

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/

Vendor Advisoryx_refsource_GENTOOThird Party Advisory

Source: [email protected]

https://security.gentoo.org/glsa/202104-03