CVE-2021-31007: Incorrect Default Permissions

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30972: Incorrect Authorization

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30970: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30964: Incorrect Permission Assignment for Critical Resource

An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30856: Incorrect Authorization

This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences...

PT-2021-18976

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 8 macOS Big Sur versions prior to 11.6 iOS versions prior to 15 iPadOS versions prior to 15 Description The issue allows a malicious application to bypass Privacy preferences. This was addressed with improved...

PT-2021-19011

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.6.2 tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 macOS Catalina versions prior to Security Update 2021-008 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3...

PT-2021-19007

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 Description A malicious application may be able to bypass Privacy preferences due to an inherited permissions issue. This issue...

CVE-2021-30925: Incorrect Authorization

The issue was addressed with improved permissions logic. This issue is fixed in watchOS 8, macOS Big Sur 11.6, iOS 15 and iPadOS 15. A malicious application may be able to bypass Privacy preferences...

macOS 11.x < 11.5 Multiple Vulnerabilities (HT212602)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.5. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big Sur 11.5. Visiting a maliciously crafted webpage...

PT-2021-19043

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 7.6 tvOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 Description A permissions issue was addressed with improved validation, which may allow a malicious application to bypass certain Privacy preference...

PT-2021-18861

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.5 Description A malicious application may be able to bypass Privacy preferences. This issue was addressed with improved entitlements. Recommendations For macOS Big Sur versions prior to 11.5, update to macOS...

PT-2021-18878

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.7 macOS Big Sur versions prior to 11.5 watchOS versions prior to 7.6 Description A logic issue was addressed with improved state management, which may allow a malicious application to bypass certain Privacy preferences...

About the security content of tvOS 14.7

About the security content of tvOS 14.7 This document describes the security content of tvOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2021-3334

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.4 Description A permissions issue was addressed with improved validation. This issue may allow a malicious application to bypass Privacy preferences. There is a report that this issue may have been actively exploited...

PT-2021-18844

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.4 Description A malicious application may be able to bypass certain Privacy preferences due to an issue that has been addressed with improved data protection. Recommendations For versions prior to 11.4, update to mac...

PT-2021-18918

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.3 Description A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences. This issue was addressed by adding a new Remote Login option for opting into Full Disk Access fo...

About the security content of tvOS 14.5

About the security content of tvOS 14.5 This document describes the security content of tvOS 14.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2020-29621

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences...

CVE-2020-29621

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences...