Input validation

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Unpacking a maliciously crafted archive may lead to arbitrary code...

CVE-2021-31013

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2021-31006

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-31004

CVE-2021-31004 is a race-condition vulnerability tracked across multiple sources (Apple macOS Monterey 12.0.1 and macOS Big Sur 11.5). The underlying issue is a race condition that can allow an application to gain elevated privileges, mitigated by improved locking/state handling. Apple’s fixes ar...

CVE-2021-31004

A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to gain elevated privileges...

CVE-2021-31002

CVE-2021-31002 relates to macOS Big Sur and macOS Monterey. It describes an out-of-bounds read that was addressed by improved input validation. Affected platforms include macOS Big Sur 11.6.2 and Monterey 12.0.1. Impact per sources: a malicious application may be able to execute arbitrary code wi...

CVE-2021-30995

CVE-2021-30995 is a race-condition vulnerability in Apple platforms. The issue concerns improved state handling that could allow a malicious application to elevate privileges. Publicly listed fixes include macOS Big Sur 11.6.2; macOS Monterey 12.1; tvOS 15.2; Security Update 2021-008 Catalina; iO...

CVE-2021-30982

CVE-2021-30982 is a race condition vulnerability in macOS (reported as part of Apple updates). The public description states a race condition was addressed with improved locking, leading to fixes in macOS Monterey 12.1, Security Update 2021-008 Catalina, and macOS Big Sur 11.6.2. The impact note ...

CVE-2021-30981

CVE-2021-30981 affects the macOS kernel on macOS Big Sur, Catalina, and Monterey. It is a buffer overflow vulnerability caused by insufficient bounds checking, enabling an attacker with local access and low privileges to potentially execute arbitrary code with kernel privileges when triggering th...

CVE-2021-30980

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30977

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30977

CVE-2021-30977 affects macOS Monterey 12.1 (and is listed with related updates for Catalina/Big Sur). The description indicates a buffer overflow leading to memory corruption in graphics-related code that could allow arbitrary code execution with kernel privileges, when a malicious local attacker...

CVE-2021-30976

CVE-2021-30976 is tied to a logic issue that allows a malicious app to bypass Gatekeeper checks via the LaunchServices component. Apple documents fix in macOS Monterey 12.1 as well as Security Update 2021-008 Catalina and macOS Big Sur 11.6.2. The issue is described as a state-management problem ...

CVE-2021-30975

This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox...

CVE-2021-30973

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted file may disclose user information...

CVE-2021-30972

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30971

CVE-2021-30971 describes an out-of-bounds write in USD file processing. Affected: macOS Monterey 12.1; iOS 15.2 and iPadOS 15.2; macOS Big Sur 11.6.2; Security Update 2021-008 Catalina. Root cause: improved bounds checking fixes the issue. Impact: processing a malicious USD file may terminate the...

CVE-2021-30971

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or...

CVE-2021-30970

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30969

A path handling issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Processing a maliciously crafted URL may cause unexpected JavaScript execution from a file on disk...