CVE-2021-30744

CVE-2021-30744 describes a cross-origin issue with iframe elements that was addressed by improved tracking of security origins. The vulnerability can lead to universal cross-site scripting when processing malicious web content. The initial entries state fixes in multiple Apple platforms: tvOS 14....

CVE-2021-30740

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30740

CVE-2021-30740 is a logic issue addressed by improved input validation, fixed in macOS Big Sur 11.4 and iOS/iPadOS 14.6, tvOS 14.6, and watchOS 7.5. A malicious app could potentially execute arbitrary code with kernel privileges. The description and connected records confirm the affected platform...

CVE-2021-30736

CVE-2021-30736 involves a buffer overflow that was mitigated by improved size validation. The advisory states that the issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, and iPadOS 14.6. The impact is that an application may be able to execute arbitrary code with kernel privi...

CVE-2021-30727

CVE-2021-30727 involves a logic issue addressed by improved state management and is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6, and iPadOS 14.6. A malicious app may be able to modify protected parts of the file system. No exploitation status or detailed root cause is provided b...

CVE-2021-30734

CVE-2021-30734 is a memory corruption vulnerability in WebKitGTK and WPE WebKit prior to version 2.32.3. Processing malicious web content could lead to arbitrary code execution. Advisories (ASA-202107-67/68 and Debian DSA-4945-1) note the fix to 2.32.3-1 and list the affected packages. Apple’s vu...

CVE-2021-30724

Technical details for CVE-2021-30724 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-30724

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local attacker may be able to elevate their privileges...

CVE-2021-30720

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers...

CVE-2021-30720

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers...

CVE-2021-30788

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory...

CVE-2021-30788

CVE-2021-30788 affects Apple platforms and is triggered by processing a maliciously crafted TIFF file.根 The issue leads to denial-of-service or memory disclosure and is mitigated by fixes in Apple updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, and Security Update 2021-005 Mojave/2...

Apple 多款产品缓冲区错误漏洞

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is an...

CVE-2021-30665

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that...

CVE-2021-30663

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Recent assessments: Assessed Attacker...

CVE-2021-31006

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-31000

A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious application may be able to read sensitive contact information...

CVE-2021-31008

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 15.1, tvOS 15.1, iOS 15 and iPadOS 15, macOS Monterey 12.0.1, watchOS 8.1. Processing maliciously crafted web content may lead to code execution...

CVE-2021-31007

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30995

A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to elevate privileges...