CVE-2021-30970

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30970

Powerdir (CVE-2021-30970) is a macOS TCC bypass that attackers could exploit to access protected data by manipulating the user’s home directory and TCC trust database. Microsoft/MSRT and related sources describe how early PoCs changed the user’s home directory or injected code via configd to enab...

CVE-2021-30968

A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to bypass...

CVE-2021-30964

CVE-2021-30964 describes an inherited permissions issue that could allow a malicious application to bypass Privacy preferences. The issue is fixed in Apple OS updates: macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. The CVE is categorized under privacy controls (TCC) and involves bypa...

CVE-2021-30964

An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30946

CVE-2021-30946 is a logic issue in the macOS LaunchServices component that could allow a malicious app to bypass certain Privacy preferences. The vulnerability is fixed in macOS Monterey 12.1 and is listed as affecting LaunchServices on macOS Big Sur-era releases; related Apple advisories also re...

CVE-2021-30946

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30925

CVE-2021-30925 affects Apple platforms (watchOS, macOS Big Sur, iOS, iPadOS) via a sandbox/privacy logic issue where a malicious app could bypass Privacy preferences. Root cause described as improved permissions logic; impact is exposure of restricted data due to bypass. Fixes exist in watchOS 8,...

CVE-2021-30925

The issue was addressed with improved permissions logic. This issue is fixed in watchOS 8, macOS Big Sur 11.6, iOS 15 and iPadOS 15. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30856

This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences...

CVE-2021-30925: Incorrect Authorization

The issue was addressed with improved permissions logic. This issue is fixed in watchOS 8, macOS Big Sur 11.6, iOS 15 and iPadOS 15. A malicious application may be able to bypass Privacy preferences...

CVE-2021-31006: Incorrect Default Permissions

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30856: Incorrect Authorization

This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences...

CVE-2021-30946: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. A malicious application may be able to bypass certain Privacy preferences...

PT-2021-7561

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.6.2 tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 macOS Catalina versions prior to Security Update 2021-008 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3...

CVE-2021-30970: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-31007: Incorrect Default Permissions

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30972: Incorrect Authorization

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30964: Incorrect Permission Assignment for Critical Resource

An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. A malicious application may be able to bypass Privacy preferences...

Textpattern CMS < 4.8.2 XSS Vulnerability

Textpattern CMS is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...