CVE-2021-1773

CVE-2021-1773 is an ImageIO-related logic issue in macOS/iOS/watchOS/tvOS where processing a maliciously crafted image can cause a denial of service. The root cause is improved state management. It is fixed in Apple updates: macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave,...

CVE-2021-1769

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious attacker with arbitrary read and write capability may be able to bypas...

CVE-2021-1751

CVE-2021-1751 is a macOS vulnerability described as a logic issue in state management that can be triggered by mounting a malicious Samba network share, potentially leading to arbitrary code execution. The entry indicates the issue is fixed in macOS Big Sur 11.2 and Security Update 2021-001 Catal...

CVE-2021-1751

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

CVE-2020-29613

Apple fixed CVE-2020-29613 in iOS 14.3 / iPadOS 14.3. Description: a logic issue in state management could cause an enterprise app installation prompt to display the wrong domain. Root cause: state-management logic flaw. Impact: may display an incorrect domain during enterprise app installation p...

CVE-2020-29613

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.3 and iPadOS 14.3. An enterprise application installation prompt may display the wrong domain...

CVE-2020-27938

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to...

CVE-2020-27938

CVE-2020-27938 is a logic/state-management issue in macOS components that could allow a malicious app to elevate privileges. It is fixed by Apple in macOS Big Sur 11.2 and Security Updates 2020-001 Catalina, 2020-007 Mojave, 2021-001 Catalina, and 2021-001 Mojave, plus macOS Big Sur 11.1. There i...

CVE-2020-27937

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to access private information...

CVE-2020-27937

CVE-2020-27937 is a macOS TCC bypass (Powerdir). Attackers could change a user’s home directory and plant a fake TCC.db to grant arbitrary app permissions (e.g., microphone/camera) without prompts. Exploitation used dscl/dsexport/dsimport or configd, and later fixes (macOS Monterey) patched the u...

CVE-2020-27922

CVE-2020-27922 is a logic issue in Apple’s font processing pathway (CoreText/FontParser) that could allow arbitrary code execution when parsing a maliciously crafted font file. The issue is fixed in macOS Big Sur 11.1 and corresponding security updates: Catalina 10.15.7 (Security Update 2020-001)...

CVE-2020-27901

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2020-10008

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.0.1. A malicious application with root privileges may be able to access private information...

CVE-2020-9971

CVE-2020-9971 affects Apple systems (watchOS 7.0; tvOS 14.0; iOS 14.0/iPadOS 14.0; macOS Big Sur 11.0.1). Description documents a logic issue that was fixed via improved input/validation logic, enabling a malicious application to potentially elevate privileges. Affected components are tied to mul...

CVE-2020-9971

A logic issue was addressed with improved validation. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. A malicious application may be able to elevate privileges...

CVE-2021-1870

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...

CVE-2021-1871

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...

CVE-2021-1871

A logic issue was found in WebKitGTK and WPE WebKit in versions prior to 2.32.0. A remote attacker may be able to cause arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-1870

A logic issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A remote attacker may be able to cause arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-1870

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...