CVE-2021-1874

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-1874

CVE-2021-1874 affects Apple devices (Kernel component) and is described as a logic issue related to state management that could allow an application to execute arbitrary code with kernel privileges. Technical details across connected sources consistently indicate the root cause is a state-managem...

CVE-2021-30662

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution...

CVE-2021-30662

CVE-2021-30662 affects Apple iOS/iPadOS; processing a maliciously crafted file may lead to arbitrary code execution. Apple fixed this with iOS 14.5 and iPadOS 14.5. Public references note associated updates in Apple’s security content. Other connected records reiterate the same remediation date a...

CVE-2021-1865

CVE-2021-1865 concerns a log-in credential leak where passwords could be visible in screenshots on iOS devices. The issue is described as a rendering/validation problem that allowed a user’s password to appear onscreen. Affected software is iOS and iPadOS, with fixed behavior implemented in iOS 1...

CVE-2021-1865

An issue obscuring passwords in screenshots was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible on screen...

CVE-2021-1863

CVE-2021-1863 affects Apple iOS/iPadOS with an NFC tag action authentication flaw. The issue could allow a person with physical access to an iOS device to place calls to any number. Apple fixed it in iOS 14.5 / iPadOS 14.5 by improving action authentication. Connected sources corroborate the vuln...

CVE-2021-1863

An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number...

CVE-2021-1862

Description: A person with physical access may be able to access contacts. This issue is fixed in iOS 14.5 and iPadOS 14.5. Impact: An issue with Siri search access to information was addressed with improved logic...

CVE-2021-1862

CVE-2021-1862 describes an information-disclosure issue on Apple devices where a person with physical access could potentially access contacts via Siri search. The vulnerability affects iOS and iPadOS prior to 14.5 and is addressed in iOS 14.5 / iPadOS 14.5 with improved logic for Siri search acc...

CVE-2021-1860

CVE-2021-1860 relates to a memory initialization issue in Apple platforms, addressed by memory handling improvements and fixed in Security Update 2021-002 (Catalina), 2021-003 (Mojave), and iOS 14.5 / iPadOS 14.5 / watchOS 7.4 / tvOS 14.5 / macOS Big Sur 11.3. A malicious application may be able ...

CVE-2021-1854

CVE-2021-1854 describes a call-termination issue in iOS/iPadOS where a legacy cellular network could automatically answer an incoming call when a current call ended or dropped. The root cause is described as a logic flaw in call termination that was addressed with improved logic. Affected product...

CVE-2021-1854

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops...

CVE-2021-1852

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory...

CVE-2021-1852

CVE-2021-1852 relates to an out-of-bounds read in the Apple kernel exposed on iOS and iPadOS. The underlying issue was addressed by improved input validation, and patches were released in iOS 14.5 and iPadOS 14.5. A local user could potentially read kernel memory. Public documents from Apple and ...

CVE-2021-1858

CVE-2021-1858 affects Apple OS components handling images. A vulnerability in processing a maliciously crafted image can lead to arbitrary code execution due to an out-of-bounds write, addressed by improved bounds checking. Fixed in Security Update 2021-002 Catalina, iOS 14.5/iPadOS 14.5, watchOS...

CVE-2021-1848

CVE-2021-1848 affects Apple iOS and iPadOS; a local user could view sensitive information in the app switcher due to UI handling issues. The issue is addressed in iOS 14.5 and iPadOS 14.5 with fixes described as improved UI handling. Public references (NVD, Red Hat advisory) confirm the local-acc...

CVE-2021-1848

The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher...

CVE-2021-1849

CVE-2021-1849 concerns an issue in code signature validation that allowed bypassing Privacy preferences. It affects Apple platforms and was fixed in macOS Big Sur 11.3, iOS 14.5/iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The vulnerability’s root cause is described as insufficient checks in code sig...

CVE-2021-1849

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences...