CVE-2021-30946

CVE-2021-30946 is a logic issue in the macOS LaunchServices component that could allow a malicious app to bypass certain Privacy preferences. The vulnerability is fixed in macOS Monterey 12.1 and is listed as affecting LaunchServices on macOS Big Sur-era releases; related Apple advisories also re...

CVE-2021-30946

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30944

Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious app may be able to access data from other apps by enabling additional logging...

CVE-2021-30944

CVE-2021-30944 is an Apple logic-issue vulnerability fixed in iOS 15.2, iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, and tvOS 15.2. The issue allowed a malicious app to access data from other apps by enabling additional logging, attributed to improved state management. The provided documents co...

CVE-2021-30935

A logic issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30931

A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. A malicious application may be able to disclose kernel memory...

CVE-2021-30931

CVE-2021-30931 is a logic-issue vulnerability in macOS Bluetooth handling that could allow a malicious application to disclose kernel memory. The issue was mitigated by Apple in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, and Security Update 2021-008 Catalina. Affected components are tied to ker...

CVE-2021-30930

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. An attacker may be able to track users through their IP address...

CVE-2021-30930

CVE-2021-30930 is a logic-issue vulnerability affecting Apple software (notably WebRTC/WebKit components) that could allow an attacker to track users via their IP address. Apple’s entry for macOS Monterey 12.0.1 lists this CVE as fixed, addressing the state-management/privacy risk. The NVD entry ...

CVE-2021-30921

CVE-2021-30921 affects Apple iOS 14.5 and iPadOS 14.5. A logic/state-management issue allowed a user's password to be visible onscreen (notably tied to UIKit/UI handling). The vulnerability stems from improved state management; Apple patched in iOS 14.5/iPadOS 14.5. No exploitation details are pr...

CVE-2021-30921

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible onscreen...

CVE-2021-30915

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A person with physical access to an iOS device may be able to determine...

CVE-2021-30896

CVE-2021-30896 is a logic-issue vulnerability in Apple’s Game Center that could allow a malicious app to read a user’s gameplay data. The initial entry states a logic issue addressed with improved restrictions and lists affected platforms as iOS/iPadOS 15.0.x, tvOS 15.x, watchOS 8.x, and macOS Mo...

CVE-2021-30896

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, macOS Monterey 12.0.1. A malicious application may be able to read user's gameplay data...

CVE-2021-30895

CVE-2021-30895 is a logic issue in Apple’s Game Center that could allow a malicious app to access a user’s contacts. The entry lists fixes across multiple Apple platforms: iOS 15.0.2, iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, and macOS Monterey 12.0.1. Connected documentation confirms the vulnerabil...

CVE-2021-30895

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, macOS Monterey 12.0.1. A malicious application may be able to access information about a user's contacts...

CVE-2021-30890

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2021-30890

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2021-30890

CVE-2021-30890 is a WebKit/WebKitGTK/WebKitGTK-derived vulnerability described as a logic/state issue where processing maliciously crafted web content may lead to universal cross-site scripting. Public mentions appear in multiple connected advisories: Debian DSA-5030-1 (webkit2gtk) and DSA-5031-1...

CVE-2021-30890

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to universal cross site scripting...