CVE-2021-1825

CVE-2021-1825: vulnerability in Apple iCloud for Windows

Published 08 Sep 2021 · Updated 03 Aug 2024

Follow this CVE + Monitor macOS + Monitor iOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.

Affected products

Apple · iCloud for Windows Apple · iOS and iPadOS Apple · iTunes for Windows Apple · macOS Apple · Safari Apple · tvOS Apple · watchOS

Related CVEs — Apple iCloud for Windows

In the same product, most dangerous first.

CVE-2025-43300CRITICALCVE-2025-43300EPSS 65.2%KEV CVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 51.5%KEV CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEV CVE-2026-86950HIGHCVE-2026-86950EPSS 26.2%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV

References

https://support.apple.com/en-us/HT212317 https://support.apple.com/en-us/HT212318 https://support.apple.com/en-us/HT212319 https://support.apple.com/en-us/HT212321 https://support.apple.com/en-us/HT212323 https://support.apple.com/en-us/HT212324 https://support.apple.com/en-us/HT212325