CVE-2021-1851

CVE-2021-1851 relates to a logic issue in Apple's OS kernel/state management that could allow an attacker to execute arbitrary code with kernel privileges. The vulnerability is fixed by Security Update 2021-002 for Catalina, Security Update 2021-003 for Mojave, and OS updates (iOS 14.5, iPadOS 14...

CVE-2021-1832

Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. The issue was addressed with improved permissions logic...

CVE-2021-1832

CVE-2021-1832 concerns copied files potentially not receiving the expected file permissions. The NVD entry notes this was addressed by improved permissions logic and is fixed in Apple Security Update 2021-002 for Catalina, and in iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11....

CVE-2021-1840

CVE-2021-1840 is a memory corruption vulnerability described as being fixed by macOS Big Sur 11.3 and Security Updates 2021-002 ( Catalina ) and 2021-003 ( Mojave). The description notes improved validation as the fix and indicates a local attacker could elevate privileges. Multiple connected sou...

CVE-2021-1843

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1843

CVE-2021-1843 affects Apple systems; the issue arises from processing a maliciously crafted image and could lead to arbitrary code execution. It is addressed by iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3, and Security Update 2021-002 (Catalina) / 2021-003 (Mojave). Root caus...

CVE-2021-1829

CVE-2021-1829 is a type confusion vulnerability in macOS Big Sur’s Wi‑Fi subsystem. The issue could allow an attacker to execute arbitrary code with kernel privileges. It is fixed in macOS Big Sur 11.3. The NVD notes a critical impact (CVSSv3.1: 9.8) with network vector, no user interaction requi...

CVE-2021-1829

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30664

CVE-2021-30664 is an Apple-core vulnerability affecting CoreAudio on macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The issue is an out-of-bounds write that is triggered when processing a maliciously crafted file, with the potential to execute arbitrary code. The fixed ver...

CVE-2021-30680

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4. A local user may be able to load unsigned kernel extensions...

CVE-2021-30680

The CVE-2021-30680 entry affects macOS Big Sur prior to 11.4, where a logic issue in Kext Management allowed a local user to load unsigned kernel extensions due to improved state management. The vulnerability is fixed in macOS Big Sur 11.4. The provided sources indicate this is a local-privilege-...

CVE-2021-30685

The CVE-2021-30685 issue concerns Apple platforms where parsing a maliciously crafted audio file may lead to disclosure of user information. Affected: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Root cause: improved checks addressed the is...

CVE-2021-30682

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

CVE-2021-30682

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

CVE-2021-30689

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2021-30716

CVE-2021-30716 involves a logic issue fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, and Security Update 2021-004 Mojave. The vulnerability arises from improved state management, enabling an attacker in a privileged network position to cause a denial of service. Affected platform...

CVE-2021-30709

CVE-2021-30709 affects macOS and iOS platforms where processing a maliciously crafted USD file could disclose memory contents. The issue was addressed by Apple with fixes in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, and iOS/iPadOS 14.6. Root cause det...

CVE-2021-30713

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited...

CVE-2021-30713

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited...

CVE-2021-30713

CVE-2021-30713 affects macOS Big Sur 11.4 and concerns the TCC (Transparency, Consent, and Control) subsystem. The vulnerability is described as a permissions issue that could allow a malicious application to bypass Privacy preferences, with the fix implemented in Big Sur 11.4. Related sources co...