CVE-2021-30773

CVE-2021-30773 describes a code-signature validation issue in Apple Identity Services that could allow a malicious application to bypass code signing checks. Affected products include iOS, iPadOS, tvOS, and watchOS; root cause is improved validation checks in the code-signing path. Impact is limi...

CVE-2021-30773

An issue in code signature validation was addressed with improved checks. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. A malicious application may be able to bypass code signing checks...

CVE-2021-30774

CVE-2021-30774 is a local privilege-escalation flaw described as a logic issue that Apple addressed by improving validation. The NVD entry states it is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7, mitigating the root-privilege gain vector for a malicious app. The connected d...

CVE-2021-30774

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges...

CVE-2021-30769

CVE-2021-30769 is a kernel‑level issue in Apple platforms where a malicious actor with arbitrary read/write could bypass Pointer Authentication. The vulnerability is fixed in iOS 14.7, iPadOS 14.7, watchOS 7.6, and tvOS 14.7. Connected documents confirm the root cause as a kernel logic issue and ...

CVE-2021-30769

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication...

CVE-2021-30775

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2021-30775

CVE-2021-30775 describes a memory corruption in Apple devices triggered by processing a maliciously crafted audio file, potentially leading to arbitrary code execution. Public sources indicate the vulnerability is addressed via state-management improvements and is fixed in affected platforms as f...

CVE-2021-30770

CVE-2021-30770 is a kernel‑level logic issue in Apple devices (iOS 14.7, tvOS 14.7, watchOS 7.6). An attacker who already has kernel code execution may bypass kernel memory mitigations due to a validation issue in the Kernel. The fix is included in the 14.7 updates; no exploitation status is repo...

CVE-2021-30764

Processing a maliciously crafted file may lead to arbitrary code execution. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. This issue was addressed with improved checks...

CVE-2021-30764

CVE-2021-30764 is an Apple ImageIO vulnerability that may allow arbitrary code execution when parsing a malicious image/file. The issue is described across Apple OS updates (iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5) with fixes implemented via improved input validation and checks. Connected do...

CVE-2021-30768

CVE-2021-30768 is a logic issue: Apple fixed a sandbox-bypass in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, and Security Update 2021-004 Catalina. The vulnerability allows a sandboxed process to circumvent sandbox restrictions, related to input validation in the affected components. Th...

CVE-2021-30768

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2021-30760

CVE-2021-30760 describes an integer overflow in Apple’s font processing that could allow arbitrary code execution when handling a malicious font file. The issue is mitigated by input validation improvements and is fixed in Apple updates: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Secur...

CVE-2021-30763

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.7, watchOS 7.6. A shortcut may be able to bypass Internet permission requirements...

CVE-2021-30763

CVE-2021-30763 involves an input-validation issue in ActionKit on Apple iOS/iPadOS. Affected: iOS 14.7 and iPadOS 14.7; impact described as a shortcut that may bypass Internet permission requirements. Root cause: improved input validation fixes address the issue. Mitigation: apply iOS 14.7 / iPad...

CVE-2021-30758

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30758

CVE-2021-30758 describes a type confusion issue in WebKit that could allow arbitrary code execution when processing malicious web content. The initial description ties the vulnerability to Apple products and fixes in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, and tvOS 14.7. Connect...

CVE-2021-30758

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30758

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...