CVE-2021-30982

CVE-2021-30982 is a race condition vulnerability in macOS (reported as part of Apple updates). The public description states a race condition was addressed with improved locking, leading to fixes in macOS Monterey 12.1, Security Update 2021-008 Catalina, and macOS Big Sur 11.6.2. The impact note ...

CVE-2021-30981

CVE-2021-30981 affects the macOS kernel on macOS Big Sur, Catalina, and Monterey. It is a buffer overflow vulnerability caused by insufficient bounds checking, enabling an attacker with local access and low privileges to potentially execute arbitrary code with kernel privileges when triggering th...

CVE-2021-30980

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30977

CVE-2021-30977 affects macOS Monterey 12.1 (and is listed with related updates for Catalina/Big Sur). The description indicates a buffer overflow leading to memory corruption in graphics-related code that could allow arbitrary code execution with kernel privileges, when a malicious local attacker...

CVE-2021-30977

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30976

CVE-2021-30976 is tied to a logic issue that allows a malicious app to bypass Gatekeeper checks via the LaunchServices component. Apple documents fix in macOS Monterey 12.1 as well as Security Update 2021-008 Catalina and macOS Big Sur 11.6.2. The issue is described as a state-management problem ...

CVE-2021-30975

This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox...

CVE-2021-30973

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted file may disclose user information...

CVE-2021-30972

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30971

CVE-2021-30971 describes an out-of-bounds write in USD file processing. Affected: macOS Monterey 12.1; iOS 15.2 and iPadOS 15.2; macOS Big Sur 11.6.2; Security Update 2021-008 Catalina. Root cause: improved bounds checking fixes the issue. Impact: processing a malicious USD file may terminate the...

CVE-2021-30971

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or...

CVE-2021-30970

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30969

A path handling issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Processing a maliciously crafted URL may cause unexpected JavaScript execution from a file on disk...

CVE-2021-30969

CVE-2021-30969 describes a path-handling vulnerability in macOS Help Viewer. The issue could allow processing a malicious URL to trigger unexpected JavaScript execution from a file on disk. Apple’s advisories indicate fixes were delivered in Security Update 2021-008 for macOS Catalina and also in...

CVE-2021-30965

CVE-2021-30965 involves a logic/state-management issue in macOS components that can cause a denial of service to Endpoint Security clients. Affected products/versions per the sources: macOS Monterey 12.1, Security Update 2021-008 Catalina, and macOS Big Sur 11.6.2. Remediation: update to Monterey...

CVE-2021-30963

CVE-2021-30963 affects macOS CoreAudio. A buffer overflow in handling audio content was fixed in Security Update 2021-008 ( Catalina ) and Big Sur 11.6.2. Public description notes parsing a maliciously crafted audio file may disclose user information. The Apple security content (HT212981/HT212979...

CVE-2021-30963

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30962

A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30961

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30959

The CVE-2021-30959 entry affects macOS CoreAudio on macOS Catalina and Big Sur. It corresponds to a buffer overflow in parsing a malicious audio file, with memory handling improvements as the underlying fix. Apple’s Security Update 2021-008 Catalina and Big Sur 11.6.2 address this issue. The vuln...