CVE-2021-30906

CVE-2021-30906 is a local elevation-of-privileges flaw reported in the Apple watchOS/iCloud stack. The vulnerability can be exploited by a local attacker with a simple authentication, leading to higher privileges. The issue is addressed by Apple in their updates for iOS 15.1/iPadOS 15.1 and relat...

CVE-2021-30905

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information...

CVE-2021-30905

CVE-2021-30905 is an out-of-bounds read vulnerability fixed in Apple OS updates: iOS 15.1 / iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, and macOS Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information. Affected component is title-lis...

CVE-2021-30904

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

CVE-2021-30899

CVE-2021-30899 describes a race condition that was addressed with improved state handling. It affects macOS kernel-related pathways and, if exploited by a malicious app, may allow arbitrary code execution with kernel privileges. The vulnerability is fixed in macOS Monterey 12.0.1, Security Update...

CVE-2021-30897

An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin...

CVE-2021-30897

CVE-2021-30897 : The issue is in the resource timing API specification; the updated spec was implemented. It is fixed in macOS Monterey 12.0.1. A malicious site could exfiltrate cross-origin data via resource timing timing data. The connected advisories (MiracleLinux/Alibaba/Tencent/Ten able) rei...

CVE-2021-30897

An issue existed in the specification for the resource timing API. The specification was updated and the updated specification was implemented. This issue is fixed in macOS Monterey 12.0.1. A malicious website may exfiltrate data cross-origin...

CVE-2021-30896

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, macOS Monterey 12.0.1. A malicious application may be able to read user's gameplay data...

CVE-2021-30895

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, macOS Monterey 12.0.1. A malicious application may be able to access information about a user's contacts...

CVE-2021-30888

An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1. A malicious website using Content Security Policy reports may be able to leak information via redirect behavior...

CVE-2021-30888

An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1. A malicious website using Content Security Policy reports may be able to leak information via redirect behavior...

CVE-2021-30887

CVE-2021-30887 is a WebKit-related logic issue affecting how Content Security Policy is enforced when processing malicious web content. The description states that improved restrictions fix the problem, with the vulnerability fixed in Apple platforms: macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15...

CVE-2021-30887

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy...

CVE-2021-30881

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Unpacking a maliciously crafted archive may lead to arbitrary code...

CVE-2021-30879

CVE-2021-30879 affects macOS AppleScript handling (out-of-bounds read). Root cause is an issue in processing a malicious AppleScript binary; Apple fixed this with improved bounds checking. Affected products/versions include macOS Big Sur 11.6.1, macOS Catalina Security Update 2021-007, and macOS ...

CVE-2021-30877

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2021-30877

CVE-2021-30877 is an Apple macOS AppleScript-related vulnerability involving an out-of-bounds read in an AppleScript binary. The issue was fixed by improved bounds checking and applies to macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. Exploitation could lead t...

CVE-2021-30876

CVE-2021-30876 is an AppleScript-related vulnerability in macOS where an out-of-bounds read was addressed by improved bounds checking. It affects macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. Exploitation could cause an application to terminate unexpectedly o...

CVE-2021-30873

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to elevate privileges...