CVE-2021-1882

CVE-2021-1882 is a memory corruption vulnerability in Apple software. Connected sources specify an issue that can allow an application to gain elevated privileges, with fixes in Security Update 2021-002 for Catalina, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11.3. The NVD/NC...

CVE-2021-1882

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges...

CVE-2021-1881

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary cod...

CVE-2021-30655

An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. The issue was addressed with improved permissions logic...

CVE-2021-30655

CVE-2021-30655 affects macOS, enabling arbitrary code execution with system privileges. Vulnerable condition traced to permissions logic; fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. Remediation is to apply the Big Sur 11.3 update or Catalina security update; the connected sour...

CVE-2021-1872

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute being enabled...

CVE-2021-1880

CVE-2021-1880 affects macOS Big Sur ImageIO: processing a maliciously crafted image may lead to arbitrary code execution. Fixed in macOS Big Sur 11.3 and watchOS 7.4. Documentation confirms the vulnerability and patch target, but deeper root-cause details are not provided beyond ImageIO handling ...

CVE-2021-1873

An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text...

CVE-2021-1873

CVE-2021-1873 concerns an API issue in Accessibility TCC permissions that could allow a malicious app to leak a user’s credentials from secure text fields. Connected sources confirm the root cause as an API permission handling flaw and state that the issue is fixed in macOS updates: Big Sur 11.3,...

CVE-2021-1861

An issue existed in determining cache occupancy. The issue was addressed through improved logic. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to track users by setting state in a cache...

CVE-2021-1861

The CVE-2021-1861 issue concerns a logic fault in how cache occupancy is determined in macOS Big Sur components (notably Safari) that could allow a malicious website to track users by setting state in a cache. The vulnerability is addressed in macOS Big Sur 11.3 via improved cache state managemen...

CVE-2021-1860

CVE-2021-1860 relates to a memory initialization issue in Apple platforms, addressed by memory handling improvements and fixed in Security Update 2021-002 (Catalina), 2021-003 (Mojave), and iOS 14.5 / iPadOS 14.5 / watchOS 7.4 / tvOS 14.5 / macOS Big Sur 11.3. A malicious application may be able ...

CVE-2021-1859

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. Locked Notes content may have been unexpectedly unlocked...

CVE-2021-1855

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to force unnecessary network connections to fetch its favicon...

CVE-2021-1855

CVE-2021-1855 describes a logic issue in Safari (macOS Big Sur WebKit/Safari cache/state handling) where a malicious webpage could trigger unnecessary network connections to fetch its favicon. The issue is fixed in macOS Big Sur 11.3. Affected product: macOS Big Sur 11.x prior to 11.3 (as disclos...

CVE-2021-1858

CVE-2021-1858 affects Apple OS components handling images. A vulnerability in processing a maliciously crafted image can lead to arbitrary code execution due to an out-of-bounds write, addressed by improved bounds checking. Fixed in Security Update 2021-002 Catalina, iOS 14.5/iPadOS 14.5, watchOS...

CVE-2021-1853

CVE-2021-1853 is a logic issue in APFS on macOS Big Sur 11.3 that could allow a local attacker to elevate privileges. The vulnerability is fixed in macOS Big Sur 11.3+. CVSS data from NVD indicates a Local attack vector with High/Partial impacts on confidentiality, integrity, and availability (ve...

CVE-2021-1853

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A local attacker may be able to elevate their privileges...

CVE-2021-1849

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences...

CVE-2021-1851

CVE-2021-1851 relates to a logic issue in Apple's OS kernel/state management that could allow an attacker to execute arbitrary code with kernel privileges. The vulnerability is fixed by Security Update 2021-002 for Catalina, Security Update 2021-003 for Mojave, and OS updates (iOS 14.5, iPadOS 14...