CVE-2021-30871

This issue was addressed with a new entitlement. This issue is fixed in iOS 14.7, watchOS 7.6, macOS Big Sur 11.5. A local attacker may be able to access analytics data...

CVE-2021-30871

CVE-2021-30871 affects Apple platforms (iOS, watchOS, macOS Big Sur 11.5) where a local attacker could access analytics data due to a change in entitlement. Mitigation: Apple addressed the issue with updates to iOS 14.7, watchOS 7.6, and macOS Big Sur 11.5. Technical details in the provided docum...

CVE-2021-30866

CVE-2021-30866 is Apple’s privacy issue where broadcast WiFi MAC addresses were removed to prevent passive tracking. It affects tvOS 15, watchOS 8, iOS 15 and iPadOS 15, with the root cause being exposure of a device’s MAC address over a Wi‑Fi broadcast. The fix is the removal of the broadcast MA...

CVE-2021-30860

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this...

CVE-2021-30855

CVE-2021-30855 is an Apple vulnerability in the Preferences component where a validation issue in the handling of symlinks could allow an application to access restricted files. The issue is addressed in Security Update 2021-005 Catalina, iOS 14.8/iPadOS 14.8 and iOS 15/iPadOS 15, watchOS 8, and ...

CVE-2021-30852

CVE-2021-30852 is a type-confusion issue in Apple’s Foundation component that can be triggered by processing malicious web content, potentially enabling arbitrary code execution. The vulnerability is addressed via memory-handling fixes and is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8,...

CVE-2021-30851

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

CVE-2021-30851

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

CVE-2021-30851

CVE-2021-30851 affects WebKitGTK and WPE WebKit. A memory corruption vulnerability could allow arbitrary code execution when processing malicious web content. Upstream fix is WebKitGTK/WebKit/WPE WebKit 2.34.1; Debian/Arch Linux advisories (DSA-4995/4996, ASA-202110-10) note remediation by upgrad...

多款Apple产品安全漏洞

Apple watchOS and others are products of Apple Inc. in the United States.Apple watchOS is a smartwatch operating system.Apple macOS Big Sur is macOS Big Sur is the 17th major version of macOS, the operating system used by Apple for the MAC.Apple TV 4K is a smart set-top box Apple TV 4K is a smart...

PT-2021-18919 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple macOS versions prior to Big Sur 11.6 Apple iOS versions prior to 14.8 and 15 Apple iPadOS versions prior to 14.8 and 15 Apple tvOS versions prior to 15 Apple watchOS versions prior to 8 Description: A race condition issue was addressed...

PT-2021-19037 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 macOS Monterey versions prior to 12.1 tvOS versions prior to 15.2 Description: A permissions issue was addressed with improved validation, which may allow ...

PT-2021-18946 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.0.2 iPadOS versions prior to 15.0.2 tvOS versions prior to 15.1 watchOS versions prior to 8.1 macOS Monterey versions prior to 12.0.1 Description: A logic issue was addressed with improved restrictions, which may have...

Apple 多款产品安全漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Apple watchOS is an operating system for smartwatches.Apple watchOS is an operati...

PT-2021-19000 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 tvOS versions prior to 15.2 Description: A buffer overflow issue was addressed with improved memory handling. Processing a...

PT-2021-18977 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 tvOS versions prior to 15.2 Description: A memory corruption issue in the processing of ICC profiles was addressed with improv...

PT-2021-18998 · Apple · Tvos +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 tvOS versions prior to 15.2 Description: A race condition was addressed with improved state handling. This issue allows a...

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a set of smart TV operating systems from the U.S. company Apple. A buffer error vulnerability exists in multiple Apple products, which could allow an attacker to cause arbitrary code execution via maliciously crafted web content. The vulnerability is fixed in the following products...

Apple tvOS 输入验证错误漏洞

Apple tvOS is a set of smart TV operating systems from the American company Apple. An input validation error vulnerability exists in multiple Apple products, where a malicious application could elevate privileges. The vulnerability is fixed in the following products and versions: iOS 15.1 and...

PT-2021-19009 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 tvOS versions prior to 15.2 Description: A logic issue was addressed with improved state management, which could cause user...