CVE-2021-1801

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2021-1790

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution...

CVE-2021-1778

An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafte...

CVE-2021-1773

CVE-2021-1773 is an ImageIO-related logic issue in macOS/iOS/watchOS/tvOS where processing a maliciously crafted image can cause a denial of service. The root cause is improved state management. It is fixed in Apple updates: macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave,...

CVE-2021-1743

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2021-1741

CVE-2021-1741 is an out-of-bounds read in a macOS/iOS image-processing component. Processing a maliciously crafted image may lead to arbitrary code execution. It is fixed via macOS Big Sur 11.2, Security Update 2021-001 (Catalina 11.2, Mojave 11.2), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4.

CVE-2020-27938

CVE-2020-27938 is a logic/state-management issue in macOS components that could allow a malicious app to elevate privileges. It is fixed by Apple in macOS Big Sur 11.2 and Security Updates 2020-001 Catalina, 2020-007 Mojave, 2021-001 Catalina, and 2021-001 Mojave, plus macOS Big Sur 11.1. There i...

CVE-2021-1789

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to...

CVE-2020-4184

IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 174802...

CVE-2020-4184

CVE-2020-4184 affects IBM Security Guardium 11.2. The IBM Security Guardium bulletin states an elevation-of-privilege issue where an operation is performed at a privilege level higher than required. Impact is escalation of privileges within affected environments. Remediation provided: Guardium 11...

IBM Security Guardium Elevation of Privilege Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An elevation of privilege vulnerability exists in IBM Security Guardiu...

Azure File Sync Agent v11.2 Release – February 2021 (KB4539952)

Update for Azure File Sync agent version 11.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Security Bulletin: IBM Security Guardium is affected by an "Apache CXF" jar vulnerability

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2017-12624 DESCRIPTION: Apache CXF is vulnerable to a denial of service. By using a specially crafted message attachment header, a remote attacker could exploit this vulnerability to cause the AX-WS and...

Security Bulletin: IBM Security Guardium is affected by an Apache Commons vulnerability

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec information disclosure CVSS Base score: 7.5 CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/177835 for the current score. CVS...

Apple Security Update: macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave

Apple recommends to install security update macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave on devices macOS Big Sur 11.0.1, macOS Catalina 10.15.7, and macOS Mojave 10.14.6...

CVE-2020-4952

IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028...

CVE-2020-4952

CVE-2020-4952 affects IBM Security Guardium 11.2 (also 11.1/11.3 per IBM bulletin). An authenticated user can gain root access due to improper access control (privilege escalation). Base score 8.8 (CVSS3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remediation: fixes available for 11.1, 11.2, and 11.3...

CVE-2020-4189

CVE-2020-4189 affects IBM Security Guardium: the vulnerability enables information disclosure via sensitive data in response headers. Affected products/versions cited in the IBM Security Guardium bulletin include 10.5, 10.6, 11.0, 11.1, and 11.2. The root cause is information exposure in header r...

CVE-2020-4952

IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028...

PT-2021-4220 · Apple +9 · Webkit +12

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.2 Security Update versions prior to 2021-001 Catalina Security Update versions prior to 2021-001 Mojave iOS versions prior to 14.4 iPadOS versions prior to 14.4 Description: A logic issue was addressed with improved...