CVE-2021-30930

CVE-2021-30930 is a logic-issue vulnerability affecting Apple software (notably WebRTC/WebKit components) that could allow an attacker to track users via their IP address. Apple’s entry for macOS Monterey 12.0.1 lists this CVE as fixed, addressing the state-management/privacy risk. The NVD entry ...

CVE-2021-30930

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. An attacker may be able to track users through their IP address...

CVE-2021-30929

CVE-2021-30929 is an out-of-bounds write vulnerability in macOS/iOS/macOS-related USD-file handling, fixed by bounds-check improvements. The issue could disclose memory contents when processing a maliciously crafted USD file. Affected software is macOS/macOS Monterey 12.1 and older Big Sur/ Catal...

CVE-2021-30924

CVE-2021-30924 is a denial-of-service in the Kernel that can cause a device to unexpectedly restart. The initial description notes a remote attacker can trigger this DoS via kernel state handling issues; the connected Apple advisories confirm the impact, list Kernel as affected, and state the fix...

CVE-2021-30924

A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1. A remote attacker can cause a device to unexpectedly restart...

CVE-2021-30923

A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30923

CVE-2021-30923 describes a race condition in macOS that could allow a malicious application to execute arbitrary code with kernel privileges. Apple’s advisory for macOS Monterey 12.0.1 fixes this issue by applying improved locking to the affected kernel/file-system pathways. The available connect...

CVE-2021-30920

CVE-2021-30920 affects macOS Monterey 12.0.x, with a permissions issue that allowed a local attacker to read sensitive information. Apple’s advisory for Monterey 12.0.1 documents a fix via improved validation and validation checks to address the vulnerability. The linked Apple security content no...

CVE-2021-30920

A permissions issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1. A local attacker may be able to read sensitive information...

CVE-2021-30919

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted PDF may lead...

CVE-2021-30916

CVE-2021-30916 is a memory corruption vulnerability in Apple’s Kernel that could allow a malicious app to execute arbitrary code with kernel privileges. The initial description notes fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1/iPadOS 14.8.1, Security Update 2021-007 Catalina,...

CVE-2021-30916

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with...

CVE-2021-30915

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A person with physical access to an iOS device may be able to determine...

CVE-2021-30913

The issue was addressed with improved permissions logic. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. An unprivileged application may be able to edit NVRAM variables...

CVE-2021-30913

CVE-2021-30913 affects macOS SoftwareUpdate by allowing an unprivileged app to edit NVRAM variables due to insufficient permissions handling. Apple’s advisories indicate the issue is fixed in macOS Big Sur 11.6.1 and macOS Monterey 12.0.1 by improved permissions logic/restrictions. Affected: macO...

CVE-2021-30912

CVE-2021-30912 affects macOS: a data-leak via Keychain access due to improved permissions logic. Fixes are in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. The issue is addressed in the Apple advisory; a malicious application could access a user’s Keychain it...

CVE-2021-30908

An authentication issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A local attacker may be able to view the previous logged-in user’s desktop from the fast user switching screen...

CVE-2021-30909

CVE-2021-30909 describes a memory corruption issue in Apple’s kernel that could allow an attacker to execute arbitrary code with kernel privileges. The initial document indicates fixes in macOS Monterey 12.0.1 (and Security Update 2021-007 Catalina), iOS 15.1/iPadOS 15.1, iOS 14.8.1/iPadOS 14.8.1...

CVE-2021-30908

CVE-2021-30908 affects macOS Big Sur and Monterey. The issue is an authentication/state-management flaw that could allow a local attacker to view the previously logged-in user’s desktop from the fast user switching screen. Apple fixed it in macOS Monterey 12.0.1 and macOS Big Sur 11.6.1. Remediat...

CVE-2021-30907

CVE-2021-30907 is observed in connected documents as an elevation-of-privileges issue affecting Apple watchOS, specifically the Audio component. The vulnerability can be exploited by a malicious application locally, requiring a single authentication step. Initial description notes an integer over...