CVE-2021-30700

Technical details about CVE-2021-30700 are not publicly provided in the supplied documents. Monitor for updates from Apple and security advisories.

CVE-2021-30698

A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. A remote attacker may be able to cause a denial of service...

CVE-2021-30698

CVE-2021-30698 refers to a null pointer dereference in Apple software, addressed by improved input validation. Affected products include macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. The issue allows a remote attacker to cause a denial of service. The NVD reports CVSS v3.1 base sco...

CVE-2021-30706

Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. This issue was addressed with improved checks...

CVE-2021-30705

CVE-2021-30705 describes a memory-disclosure issue when Processing a maliciously crafted ASTC file. Apple states this was fixed by improved checks and updates across multiple platforms: tvOS 14.6, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, plus Security Updates Mojave 2021-004 and...

CVE-2021-30705

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted ASTC file may disclose memory contents...

CVE-2021-30692

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2021-30701

CVE-2021-30701 affects Apple platforms and arises from processing a maliciously crafted image that could lead to arbitrary code execution. The issue is fixed in: tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Update 2021-003 for Catalina. NVD cites a base score of...

CVE-2021-30701

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30696

CVE-2021-30696 refers to a logic issue where an attacker in a privileged network position could misrepresent application state. The connected documents confirm affected macOS releases and fixes: macOS Big Sur 11.4, Catalina Security Update 2021-003, and Mojave Security Update 2021-004 addressed t...

CVE-2021-30718

CVE-2021-30718 affects macOS Big Sur prior to 11.4, where a non-privileged user could modify restricted settings. Apple fixed this in Big Sur 11.4 by improving checks/state handling in the affected area. No public exploit details are provided in the connected documents.

CVE-2021-30717

CVE-2021-30717 is a memory corruption issue in macOS components that has been addressed via state-management improvements. The vulnerability could allow an attacker in a privileged network position to execute arbitrary code. Affected products/versions, per the sources, include macOS Big Sur 11.4 ...

CVE-2021-30686

CVE-2021-30686 is an out-of-bounds read in the audio processing path (coreaudio) that could disclose restricted memory when handling a maliciously crafted audio file. Affected products include tvOS/iOS/iPadOS up to 14.6, watchOS 7.5, macOS Big Sur 11.4, and macOS Security Update 2021-003; fixed b...

CVE-2021-30686

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted audio file may disclose restricted memory...

CVE-2021-30691

CVE-2021-30691 is an information-disclosure issue fixed by Apple in macOS Big Sur 11.4 and corresponding Security Updates ( Catalina 11.4- 2021-003, Mojave 11.4- 2021-004 ) and iOS/iPadOS 14.6. The vulnerability arises when processing a maliciously crafted USD file, which may disclose memory cont...

CVE-2021-30671

CVE-2021-30671 describes a validation issue in macOS that allowed a malicious application to send unauthorized Apple events to Finder. The issue is addressed by improved logic and is fixed in macOS Big Sur 11.4 and Security Update 2021-003 Catalina (MACOS HT212529/HT212530). In affected systems r...

CVE-2021-30671

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to send unauthorized Apple events to Finder...

CVE-2021-30677

This CVE-2021-30677 describes a sandbox escape vulnerability in Apple platforms addressed by updated environment sanitization. Affected products include tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, and watchOS 7.5. The r...

CVE-2021-30668

CVE-2021-30668 affects macOS Big Sur, where a local attacker with physical access could bypass the Login Window during a software update. The issue was addressed by Apple with improved checks and is fixed in macOS Big Sur 11.4. The public descriptions note a logic/state management improvement, en...

CVE-2021-30672

CVE-2021-30672 describes a memory-corruption issue addressed by improved state management. Public fixes are in macOS Big Sur 11.4, macOS Security Update 2021-004 (Catalina), and Security Update 2021-005 (Mojave). A malicious application may gain root privileges due to this vulnerability. Remediat...