CVE-2021-30795

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30795

CVE-2021-30795 is a WebKit/WebKitGTK use-after-free vulnerability that can lead to arbitrary code execution when processing malicious web content. The primary affected components are WebKitGTK/WebKit; the issue stems from improper memory handling and object lifecycle management in memory-related ...

CVE-2021-30802

CVE-2021-30802 is a use-after-free vulnerability in Apple's Image Processing/WebKit stack triggered by processing malicious web content, allowing arbitrary code execution. Public disclosures in the connected documents confirm the issue affects iOS and iPadOS, with Apple stating fixes in iOS 14.7 ...

CVE-2021-30785

CVE-2021-30785 involves a buffer overflow in Apple’s image processing path (ImageIO) that could be triggered by a maliciously crafted image and may lead to arbitrary code execution. The root cause is described as an overflow that was addressed with improved bounds checking. Affected fixes are ava...

CVE-2021-30785

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30780

CVE-2021-30780 describes an out-of-bounds write issue in Apple components that could allow a malicious application to gain root privileges. The vulnerability is addressed by improved bounds checking and is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Moj...

CVE-2021-30780

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A malicious application may be able to gain root privileges...

CVE-2021-30781

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A local attacker may be able to cause unexpected application termination or arbitrary code execution...

CVE-2021-30781

CVE-2021-30781 concerns Apple devices where a local attacker could cause unexpected application termination or arbitrary code execution due to issues addressed by “improved checks.” The entry notes fixes in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, and...

CVE-2021-30776

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Playing a malicious audio file may lead to an unexpected application termination...

CVE-2021-30776

CVE-2021-30776 is an Apple logic-issue vulnerability fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7 (Security Update 2021-004 Catalina). Description: Playing a malicious audio file may cause an unexpected application termination. Connected sources (ENISA EUVD-2021-17693, RH Red...

CVE-2021-30779

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30779

CVE-2021-30779 affects Apple ImageIO handling where processing a maliciously crafted image could lead to arbitrary code execution. The issue is addressed with improved checks and is fixed in Apple OS updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. The initial description notes ...

CVE-2021-30773

CVE-2021-30773 describes a code-signature validation issue in Apple Identity Services that could allow a malicious application to bypass code signing checks. Affected products include iOS, iPadOS, tvOS, and watchOS; root cause is improved validation checks in the code-signing path. Impact is limi...

CVE-2021-30773

An issue in code signature validation was addressed with improved checks. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. A malicious application may be able to bypass code signing checks...

CVE-2021-30774

CVE-2021-30774 is a local privilege-escalation flaw described as a logic issue that Apple addressed by improving validation. The NVD entry states it is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7, mitigating the root-privilege gain vector for a malicious app. The connected d...

CVE-2021-30774

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges...

CVE-2021-30769

CVE-2021-30769 is a kernel‑level issue in Apple platforms where a malicious actor with arbitrary read/write could bypass Pointer Authentication. The vulnerability is fixed in iOS 14.7, iPadOS 14.7, watchOS 7.6, and tvOS 14.7. Connected documents confirm the root cause as a kernel logic issue and ...

CVE-2021-30769

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication...

CVE-2021-30775

CVE-2021-30775 describes a memory corruption in Apple devices triggered by processing a maliciously crafted audio file, potentially leading to arbitrary code execution. Public sources indicate the vulnerability is addressed via state-management improvements and is fixed in affected platforms as f...