CVE-2021-30685

The CVE-2021-30685 issue concerns Apple platforms where parsing a maliciously crafted audio file may lead to disclosure of user information. Affected: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Root cause: improved checks addressed the is...

CVE-2021-30682

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

CVE-2021-30682

CVE-2021-30682 is a WebKit/Apple logic-issue vulnerability disclosed as fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. The issue allows a malicious application to leak sensitive user information due to improper restrictions. Connected sources confir...

CVE-2021-30682

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

CVE-2021-30682

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

CVE-2021-30689

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2021-30700

Technical details about CVE-2021-30700 are not publicly provided in the supplied documents. Monitor for updates from Apple and security advisories.

CVE-2021-30715

This CVE (CVE-2021-30715) describes a logic issue that was mitigated by updated state management. The vulnerability is fixed in Apple operating system updates: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 for Catalina, macOS Big Sur 11.4, and watchOS 7.5. Impact is described as allo...

CVE-2021-30697

CVE-2021-30697 is a logic issue described by Apple as being mitigated by improvements in state management. The CVE entry lists fixes in tvOS 14.6, macOS Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, and watchOS 7.5. A local user may be able to leak sensitive user ...

CVE-2021-30710

CVE-2021-30710 describes a memory corruption issue in Apple platforms that is mitigated by updated state management. The vulnerability affects tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, and watchOS 7.5. A malicious ...

CVE-2021-30706

Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. This issue was addressed with improved checks...

CVE-2021-30706

CVE-2021-30706 concerns an information-disclosure vulnerability in Apple’s ImageIO WEBP file parsing on macOS. The root cause is an out-of-bounds read triggered by specially crafted WEBP data, allowing sensitive information to be disclosed from affected processes. Public advisories list the impac...

CVE-2021-30705

CVE-2021-30705 describes a memory-disclosure issue when Processing a maliciously crafted ASTC file. Apple states this was fixed by improved checks and updates across multiple platforms: tvOS 14.6, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, plus Security Updates Mojave 2021-004 and...

CVE-2021-30705

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted ASTC file may disclose memory contents...

CVE-2021-30701

CVE-2021-30701 affects Apple platforms and arises from processing a maliciously crafted image that could lead to arbitrary code execution. The issue is fixed in: tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Update 2021-003 for Catalina. NVD cites a base score of...

CVE-2021-30701

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30707

The CVE-2021-30707 entry affects Apple platforms (macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, iPadOS 14.6). The issue was fixed by improved checks and is triggered by processing a maliciously crafted audio file, potentially leading to arbitrary code execution. Public details in connecte...

CVE-2021-30707

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2021-30686

CVE-2021-30686 is an out-of-bounds read in the audio processing path (coreaudio) that could disclose restricted memory when handling a maliciously crafted audio file. Affected products include tvOS/iOS/iPadOS up to 14.6, watchOS 7.5, macOS Big Sur 11.4, and macOS Security Update 2021-003; fixed b...

CVE-2021-30686

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted audio file may disclose restricted memory...