CVE-2021-30920

A permissions issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1. A local attacker may be able to read sensitive information...

CVE-2021-30919

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted PDF may lead...

CVE-2021-30916

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with...

CVE-2021-30916

CVE-2021-30916 is a memory corruption vulnerability in Apple’s Kernel that could allow a malicious app to execute arbitrary code with kernel privileges. The initial description notes fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1/iPadOS 14.8.1, Security Update 2021-007 Catalina,...

CVE-2021-30915

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A person with physical access to an iOS device may be able to determine...

CVE-2021-30913

The issue was addressed with improved permissions logic. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. An unprivileged application may be able to edit NVRAM variables...

CVE-2021-30913

CVE-2021-30913 affects macOS SoftwareUpdate by allowing an unprivileged app to edit NVRAM variables due to insufficient permissions handling. Apple’s advisories indicate the issue is fixed in macOS Big Sur 11.6.1 and macOS Monterey 12.0.1 by improved permissions logic/restrictions. Affected: macO...

CVE-2021-30912

CVE-2021-30912 affects macOS: a data-leak via Keychain access due to improved permissions logic. Fixes are in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. The issue is addressed in the Apple advisory; a malicious application could access a user’s Keychain it...

CVE-2021-30908

An authentication issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A local attacker may be able to view the previous logged-in user’s desktop from the fast user switching screen...

CVE-2021-30908

CVE-2021-30908 affects macOS Big Sur and Monterey. The issue is an authentication/state-management flaw that could allow a local attacker to view the previously logged-in user’s desktop from the fast user switching screen. Apple fixed it in macOS Monterey 12.0.1 and macOS Big Sur 11.6.1. Remediat...

CVE-2021-30909

CVE-2021-30909 describes a memory corruption issue in Apple’s kernel that could allow an attacker to execute arbitrary code with kernel privileges. The initial document indicates fixes in macOS Monterey 12.0.1 (and Security Update 2021-007 Catalina), iOS 15.1/iPadOS 15.1, iOS 14.8.1/iPadOS 14.8.1...

CVE-2021-30907

CVE-2021-30907 is observed in connected documents as an elevation-of-privileges issue affecting Apple watchOS, specifically the Audio component. The vulnerability can be exploited by a malicious application locally, requiring a single authentication step. Initial description notes an integer over...

CVE-2021-30907

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to elevat...

CVE-2021-30906

This issue was addressed with improved checks. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. A local attacker may be able to elevate their privileges...

CVE-2021-30906

CVE-2021-30906 is a local elevation-of-privileges flaw reported in the Apple watchOS/iCloud stack. The vulnerability can be exploited by a local attacker with a simple authentication, leading to higher privileges. The issue is addressed by Apple in their updates for iOS 15.1/iPadOS 15.1 and relat...

CVE-2021-30905

CVE-2021-30905 is an out-of-bounds read vulnerability fixed in Apple OS updates: iOS 15.1 / iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, and macOS Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information. Affected component is title-lis...

CVE-2021-30905

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information...

CVE-2021-30904

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

CVE-2021-30899

CVE-2021-30899 describes a race condition that was addressed with improved state handling. It affects macOS kernel-related pathways and, if exploited by a malicious app, may allow arbitrary code execution with kernel privileges. The vulnerability is fixed in macOS Monterey 12.0.1, Security Update...

CVE-2021-30897

CVE-2021-30897 : The issue is in the resource timing API specification; the updated spec was implemented. It is fixed in macOS Monterey 12.0.1. A malicious site could exfiltrate cross-origin data via resource timing timing data. The connected advisories (MiracleLinux/Alibaba/Tencent/Ten able) rei...