CVE-2021-30784

Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.5. A local attacker may be able to execute code on the Apple T2 Security Chip...

CVE-2021-30786

CVE-2021-30786 is an Apple-specific vulnerability describing a race condition in the handling of certain PDF content that could cause an unexpected termination or arbitrary code execution. The issue is tied to PDF processing and is stated to be fixed in iOS 14.7 and macOS Big Sur 11.5 via improve...

CVE-2021-30782

CVE-2021-30782 affects macOS components and was fixed by macOS Big Sur 11.5, Security Update 2021-004 Catalina, and Security Update 2021-005 Mojave. The issue allowed a malicious application to access restricted files due to insufficient checks; remediation is applying the specified macOS securit...

CVE-2021-30785

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30783

The CVE-2021-30783 issue is a macOS sandbox/access control bypass. The vulnerability affects macOS components and is addressed by upstream fixes in macOS Big Sur 11.5 and Security Updates 2021-004 Catalina and 2021-005 Mojave. The described impact is that a sandboxed process may circumvent sandbo...

CVE-2021-30780

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A malicious application may be able to gain root privileges...

CVE-2021-30778

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30778

CVE-2021-30778 is a macOS Big Sur local entitlement bypass vulnerability fixed in macOS Big Sur 11.5. The issue allowed a malicious application to bypass Privacy preferences due to an entitlement/permissions flaw in the system’s entitlements handling. Affected component(s) are tied to macOS Big S...

CVE-2021-30781

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A local attacker may be able to cause unexpected application termination or arbitrary code execution...

CVE-2021-30776

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Playing a malicious audio file may lead to an unexpected application termination...

CVE-2021-30779

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30772

CVE-2021-30772 affects macOS Big Sur 11.5. A malicious application may be able to gain root privileges due to improved checks. The vulnerability is described as locally exploitable (attack vector: LOCAL) with no privileges required but requiring user interaction, and it impacts confidentiality, i...

CVE-2021-30774

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges...

CVE-2021-30777

CVE-2021-30777 is an injection vulnerability affecting macOS, fixed in macOS Big Sur 11.5 and Security Updates 2021-004 Catalina and 2021-005 Mojave. The issue arises from insufficient input validation, allowing a malicious application to potentially obtain root privileges. Access to exploitation...

CVE-2021-30775

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2021-30766

CVE-2021-30766 concerns an out-of-bounds write in macOS kernel via improved input validation. Affected platforms include macOS Big Sur 11.5, Catalina (Security Update 2021-004), and Mojave (Security Update 2021-005). The issue could allow an attacker to execute arbitrary code with kernel privileg...

CVE-2021-30758

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30758

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30758

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30756

The CVE-2021-30756 issue concerns a privacy-related information disclosure on Apple devices where a local attacker could view Now Playing information from the lock screen. Affected components are Apple's Now Playing/MediaRemote functionality across macOS Big Sur and iOS/iPadOS. Root cause is a pe...