VULNERABILITY INTELLIGENCE

CVE-2021-30897

CVSS score6.5 MEDIUM

EPSS probability1.71%

CISA KEVNot currently listed

Published2021-08-24

Last modified2026-06-17

Description

An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin.