CVE-2021-30664

CVE-2021-30664 is an Apple-core vulnerability affecting CoreAudio on macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The issue is an out-of-bounds write that is triggered when processing a maliciously crafted file, with the potential to execute arbitrary code. The fixed ver...

CVE-2021-30685

The CVE-2021-30685 issue concerns Apple platforms where parsing a maliciously crafted audio file may lead to disclosure of user information. Affected: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Root cause: improved checks addressed the is...

CVE-2021-30682

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

CVE-2021-30682

CVE-2021-30682 is a WebKit/Apple logic-issue vulnerability disclosed as fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. The issue allows a malicious application to leak sensitive user information due to improper restrictions. Connected sources confir...

CVE-2021-30682

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

CVE-2021-30682

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information...

CVE-2021-30689

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2021-30693

CVE-2021-30693 describes a validation issue in Apple's image-processing path that could allow arbitrary code execution when processing a malicious image. The issue is mitigated by updates: macOS Big Sur 11.4, macOS Security Update 2021-003 Catalina, 2021-004 Mojave, and iOS 14.6 / iPadOS 14.6. Th...

CVE-2021-30709

CVE-2021-30709 affects macOS and iOS platforms where processing a maliciously crafted USD file could disclose memory contents. The issue was addressed by Apple with fixes in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, and iOS/iPadOS 14.6. Root cause det...

CVE-2021-30694

CVE-2021-30694 is an information-disclosure vulnerability in Apple platforms where processing a maliciously crafted USD file could disclose memory contents due to an issue with state management. Publicly affected software includes macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Up...

CVE-2021-30700

Technical details about CVE-2021-30700 are not publicly provided in the supplied documents. Monitor for updates from Apple and security advisories.

CVE-2021-30714

A race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and iPadOS 14.6. An application may be able to cause unexpected system termination or write kernel memory...

CVE-2021-30714

CVE-2021-30714 is a race condition in AVEVideoEncoder, affecting iOS and iPadOS prior to the fixed update. Apple’s advisory for iOS 14.6 / iPadOS 14.6 states that a race condition could allow an application to cause unexpected system termination or write kernel memory. The vulnerability is descri...

CVE-2021-30695

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2021-30715

This CVE (CVE-2021-30715) describes a logic issue that was mitigated by updated state management. The vulnerability is fixed in Apple operating system updates: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 for Catalina, macOS Big Sur 11.4, and watchOS 7.5. Impact is described as allo...

CVE-2021-30697

CVE-2021-30697 is a logic issue described by Apple as being mitigated by improvements in state management. The CVE entry lists fixes in tvOS 14.6, macOS Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, and watchOS 7.5. A local user may be able to leak sensitive user ...

CVE-2021-30710

CVE-2021-30710 describes a memory corruption issue in Apple platforms that is mitigated by updated state management. The vulnerability affects tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, and watchOS 7.5. A malicious ...

CVE-2021-30698

A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. A remote attacker may be able to cause a denial of service...

CVE-2021-30698

CVE-2021-30698 refers to a null pointer dereference in Apple software, addressed by improved input validation. Affected products include macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. The issue allows a remote attacker to cause a denial of service. The NVD reports CVSS v3.1 base sco...

CVE-2021-30706

Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. This issue was addressed with improved checks...