CVE-2021-30756

A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6. A privacy issue in Now Playing was addressed with improved permissions...

CVE-2021-30751

This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30751

Technical details about CVE-2021-30751 are not publicly provided in the connected documents. Please monitor for updates in the sources provided for more specifics on affected components, fixes, and impact.

CVE-2021-30755

Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5. An out-of-bounds read was addressed with improved input validation...

CVE-2021-30755

CVE-2021-30755 is a FontParser vulnerability affecting Apple OS components. The issue causes disclosure of process memory when processing a maliciously crafted font, due to an out-of-bounds read that was addressed by improved input validation. Apple fixed this in macOS Big Sur 11.4, tvOS 14.6, an...

CVE-2021-30753

Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. An out-of-bounds read was addressed with improved input validation...

CVE-2021-30743

CVE-2021-30743 affects Apple ImageIO across macOS/ iOS platforms. The issue is an out-of-bounds write when processing a maliciously crafted image, leading to arbitrary code execution. Apple fixed it in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, and Security Update 2021-003 Catalina/macOS B...

CVE-2021-30743

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30752

The CVE-2021-30752 issue affects Apple platforms including macOS Big Sur 11.3, iOS 14.5 / iPadOS 14.5, watchOS 7.4, and tvOS 14.5. Description indicates that Processing a maliciously crafted image could lead to arbitrary code execution, caused by an out-of-bounds read that was addressed with impr...

CVE-2021-30750

CVE-2021-30750 affects macOS Big Sur 11.3. The issue is described as a permissions logic problem that could allow a malicious application to access the user’s recent contacts. The vulnerability is addressed in macOS Big Sur 11.3 with improved permissions logic, per the CVE entry and Apple bulleti...

CVE-2021-30750

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3. A malicious application may be able to access the user's recent contacts...

CVE-2021-30748

CVE-2021-30748 is a memory corruption vulnerability in Apple platforms that could allow arbitrary code execution with kernel privileges. The issue is addressed in iOS 14.7 and macOS Big Sur 11.5. Documentation consistently attributes the root cause to memory corruption with improved state managem...

CVE-2021-30748

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30739

CVE-2021-30739 affects macOS with local privilege escalation via a memory corruption issue. The entry is supported by multiple connected documents indicating the vulnerability is addressed in macOS Big Sur 11.4 and Security Updates for Catalina/Mojave, with the fix described as an improvement in ...

CVE-2021-30740

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30740

CVE-2021-30740 is a logic issue addressed by improved input validation, fixed in macOS Big Sur 11.4 and iOS/iPadOS 14.6, tvOS 14.6, and watchOS 7.5. A malicious app could potentially execute arbitrary code with kernel privileges. The description and connected records confirm the affected platform...

CVE-2021-30738

A malicious application may be able to overwrite arbitrary files. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Mojave. An issue with path validation logic for hardlinks was addressed with improved path sanitization...

CVE-2021-30738

CVE-2021-30738 affects macOS Big Sur 11.4 and Mojave Security Update 2021-004, where a malicious application could overwrite arbitrary files due to a path validation issue in hardlinks. The fix implemented improved path sanitization and validation of hardlinks and was delivered via macOS Big Sur ...

CVE-2021-30734

CVE-2021-30734 is a memory corruption vulnerability in WebKitGTK and WPE WebKit prior to version 2.32.3. Processing malicious web content could lead to arbitrary code execution. Advisories (ASA-202107-67/68 and Debian DSA-4945-1) note the fix to 2.32.3-1 and list the affected packages. Apple’s vu...

CVE-2021-30725

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may lead to unexpected application termination...