CVE-2021-30990

CVE-2021-30990 is a macOS gatekeeper bypass vulnerability caused by a logic/validation issue. According to the provided sources, affected products include macOS Big Sur (11.x) and Monterey (12.x), with fixes in Monterey 12.1 and Security Update 2021-008 Catalina, plus Big Sur 11.6.2. The issue co...

CVE-2021-30987

CVE-2021-30987 describes an access-control issue in macOS Monterey 12.1 where a device may be passively tracked via BSSIDs. The vulnerability is disclosed in Apple advisory HT212978 and reflected in multiple sources (NVD entry and related vendor advisories). Affected product: macOS Monterey prior...

CVE-2021-30987

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked via BSSIDs...

CVE-2021-30986

A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address...

CVE-2021-30984

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30984

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30982

CVE-2021-30982 is a race condition vulnerability in macOS (reported as part of Apple updates). The public description states a race condition was addressed with improved locking, leading to fixes in macOS Monterey 12.1, Security Update 2021-008 Catalina, and macOS Big Sur 11.6.2. The impact note ...

CVE-2021-30981

CVE-2021-30981 affects the macOS kernel on macOS Big Sur, Catalina, and Monterey. It is a buffer overflow vulnerability caused by insufficient bounds checking, enabling an attacker with local access and low privileges to potentially execute arbitrary code with kernel privileges when triggering th...

CVE-2021-30977

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30977

CVE-2021-30977 affects macOS Monterey 12.1 (and is listed with related updates for Catalina/Big Sur). The description indicates a buffer overflow leading to memory corruption in graphics-related code that could allow arbitrary code execution with kernel privileges, when a malicious local attacker...

CVE-2021-30976

CVE-2021-30976 is tied to a logic issue that allows a malicious app to bypass Gatekeeper checks via the LaunchServices component. Apple documents fix in macOS Monterey 12.1 as well as Security Update 2021-008 Catalina and macOS Big Sur 11.6.2. The issue is described as a state-management problem ...

CVE-2021-30976

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks...

CVE-2021-30975

CVE-2021-30975 is a macOS vulnerability where execution of JavaScript was disabled when viewing a scripting dictionary; Apple patched this by fixing Gatekeeper/sandbox bypass via a malicious OSAX scripting addition. The fix is noted in macOS Monterey 12.1 and macOS Big Sur 11.6.2, as well as Secu...

CVE-2021-30975

This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox...

CVE-2021-30973

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted file may disclose user information...

CVE-2021-30971

CVE-2021-30971 describes an out-of-bounds write in USD file processing. Affected: macOS Monterey 12.1; iOS 15.2 and iPadOS 15.2; macOS Big Sur 11.6.2; Security Update 2021-008 Catalina. Root cause: improved bounds checking fixes the issue. Impact: processing a malicious USD file may terminate the...

CVE-2021-30971

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or...

CVE-2021-30970

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30966

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. User traffic might unexpectedly be leaked to a proxy server despite PAC configurations...

CVE-2021-30965

CVE-2021-30965 involves a logic/state-management issue in macOS components that can cause a denial of service to Endpoint Security clients. Affected products/versions per the sources: macOS Monterey 12.1, Security Update 2021-008 Catalina, and macOS Big Sur 11.6.2. Remediation: update to Monterey...