CVE-2021-30963: Buffer Copy without Checking Size of Input

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30962: Improper Initialization

A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30959: Buffer Copy without Checking Size of Input

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

PT-2021-19013 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.3 macOS Catalina versions prior to Security Update 2022-001 Description: A malicious application may be able to bypass certain Privacy preferences due to this issue. The issue was addressed with improved checks...

CVE-2021-30858: Use After Free

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...

CVE-2021-30972: Incorrect Authorization

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-31002: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2021-30856: Incorrect Authorization

This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences...

CVE-2021-30855: Improper Link Resolution Before File Access

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. An application may be able to access...

PT-2021-4658

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 11.6.x BIG-IP APM versions 12.1.x BIG-IP APM versions 13.1.x BIG-IP APM versions 14.1.x through 14.1.4.2 BIG-IP APM versions 15.1.x through 15.1.3.0 BIG-IP APM versions 16.x through 16.0.x Description The issue is related t...

PT-2021-19004

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.6.2 macOS Catalina affected versions not specified Description A buffer overflow issue was addressed with improved memory handling. Parsing a maliciously crafted audio file may lead to disclosure of user information...

PT-2021-18976

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 8 macOS Big Sur versions prior to 11.6 iOS versions prior to 15 iPadOS versions prior to 15 Description The issue allows a malicious application to bypass Privacy preferences. This was addressed with improved...

PT-2021-19005

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.2 Apple macOS Big Sur versions prior to 11.6.2 Description A memory initialization issue was addressed with improved memory handling. Parsing a maliciously crafted audio file may lead to disclosure of user...

PT-2021-18925

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.6 macOS Catalina versions prior to Security Update 2021-005 Description An out-of-bounds read issue was addressed through improved input validation. A malicious application may be able to execute arbitrary co...

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP TMM, which can be exploited by attackers to cause a denial of servi...

F5 BIG-IP资源管理错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG-IP HTTP denial of service vulnerability, where undisclosed requests may cause a significant increase in system resourc...

F5 BIG-IP APM资源管理错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 BIG IP APM OCSP denial of service vulnerability can be exploited by attackers to cause a denial of service DoS on the...

F5 BIG-IP输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 TMUI SCTP denial of service vulnerability could cause TMM to terminate when an SCTP profile with multiple paths is...

F5 BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A cross-site scripting vulnerability exists in the F5 BIG-IP TMUI. An attacker can exploit the vulnerability to execute...

F5 BIG-IP 日志信息泄露漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 Access Guided Configuration logging information disclosure vulnerability can be exploited by attackers to obtain...