CVE-2021-1871

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...

CVE-2021-1871

CVE-2021-1871 is a WebKit/WebKitGTK logic issue that could allow remote code execution. Public sources confirm the flaw affects multiple WebKit components and was fixed in macOS Big Sur 11.2, macOS Security Update 2021-001 for Catalina and Mojave, and iOS/iPadOS 14.4. Debian’s security advisory (...

CVE-2021-1870

CVE-2021-1870 affects WebKitGTK/WebKitGTK-based packages (e.g., Arch Linux webkitgtk4) prior to version 2.30.6. A remote attacker could craft web content to cause arbitrary code execution. Upstream fix is in 2.30.6; Arch advisories (ASA-202103-24/25) and CVE listings confirm the vulnerability and...

CVE-2021-1805

CVE-2021-1805 : An out-of-bounds write vulnerability was addressed with improved input validation in macOS, notably affecting the Intel Graphics Driver. Apple’s security content for Mojave, Catalina, and Big Sur indicates the issue could allow an application to execute arbitrary code with kernel ...

CVE-2021-1801

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2021-1801

This vulnerability in WebKit and WebKitGTK allows maliciously crafted web content to violate iframe sandboxing policies . The issue was addressed through improved sandbox enforcement. Affected systems include macOS Big Sur 11.2 , Security Update 2021-001 Catalina , Security Update 2021-001 Mojave...

CVE-2021-1801

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2021-1803

CVE-2021-1803 affects macOS Big Sur with a permissions logic flaw in Sandbox/privilege handling that could let a local application enumerate a user’s iCloud documents. The issue is fixed in macOS Big Sur 11.0.1 by an update to permissions logic (Apple HT211931). No public exploit details are prov...

CVE-2021-1803

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A local application may be able to enumerate the user's iCloud documents...

CVE-2021-1802

CVE-2021-1802 : A logic issue was addressed with improved state management and is fixed in macOS Big Sur 11.2, and Security Update 2021-001 for Catalina (10.15.x) and Mojave (10.14.x). The vulnerability enables a local privilege escalation as described in the sources; exploitation details are not...

CVE-2021-1797

CVE-2021-1797 affects Apple APFS on macOS (Mojave/Catalina) and related OSes. The issue, caused by inadequate permissions logic, could allow a local user to read arbitrary files. Apple patched this in macOS Big Sur 11.2 and Security Updates 2021-001 Catalina/Mojave, plus watchOS 7.3, tvOS 14.4, i...

CVE-2021-1797

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files...

CVE-2021-1786

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files...

CVE-2021-1782

CVE-2021-1782 is an iOS/XNU in-the-wild vulnerability in the IPC vouchers subsystem. Project Zero details a race window around user_data handling: an non-atomic increment of e_made in a user_data_value_element can desynchronize with ivace->ivace_made, enabling a race between releasing and revi...

CVE-2021-1777

CVE-2021-1777 affects Apple macOS/iOS/watchOS/tvOS image processing, with the issue fixed in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, plus corresponding watchOS/tvOS/iOS updates. The vulnerability description states that processing a maliciously crafted image may l...

CVE-2021-1778

An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafte...

CVE-2021-1773

CVE-2021-1773 is an ImageIO-related logic issue in macOS/iOS/watchOS/tvOS where processing a maliciously crafted image can cause a denial of service. The root cause is improved state management. It is fixed in Apple updates: macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave,...

CVE-2021-1774

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1774

CVE-2021-1774 affects Apple platforms via processing a maliciously crafted image, with potential arbitrary code execution. The issue is addressed in macOS Big Sur 11.2, Catalina 11.2 Security Update 2021-001 Mojave 11.2, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4, per Apple advisory and NVD...

CVE-2021-1772

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted text file may lead to arbitrary code...