CVE-2021-1783

CVE-2021-1783 is an Apple ImageIO-related vulnerability affecting macOS Big Sur 11.2 and prior macOS versions with corresponding Security Updates (Catalina 11.2, Mojave 11.2, watchOS 7.3, tvOS 14.4, iOS 14.4, iPadOS 14.4). The issue is described as an access/memory management problem in ImageIO w...

CVE-2021-1786

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files...

CVE-2021-1786

CVE-2021-1786 describes a logic issue addressed with improved state management that could allow a local user to create or modify system files. Affected products/versions include macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, as well as watchOS 7.3, tvOS 14.4, iOS 14.4, a...

CVE-2021-1781

CVE-2021-1781 is a privacy issue in how Apple devices handle Contact cards. The flaw could allow a malicious application to leak sensitive user information. The vulnerability is mitigated by state-management improvements and is fixed in macOS Big Sur 11.2, Security Update 2021-001 for Catalina an...

CVE-2021-1778

CVE-2021-1778 describes an out-of-bounds read in curl triggered while processing a malicious image. The issue is addressed by improved bounds checking and is fixed in Apple platforms: macOS Big Sur 11.2, Catalina Mojave/Big Sur security updates, and iOS/watchOS/tvOS updates (Security Update 2021-...

CVE-2021-1778

An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafte...

CVE-2021-1780

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack...

CVE-2021-1780

CVE-2021-1780 is a memory initialization issue in Bluetooth on Apple devices, addressed in iOS 14.4 and iPadOS 14.4. The vulnerability allows a privileged attacker to cause a denial of service via memory handling weaknesses, as described in the NVD entry and Apple’s HT212146 documentation. The is...

CVE-2021-1776

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file may lead to arbitra...

CVE-2021-1769

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious attacker with arbitrary read and write capability may be able to bypas...

CVE-2021-1764

CVE-2021-1764 is a use-after-free vulnerability that Apple fixed via memory-management improvements in macOS Big Sur 11.2, Catalina Mojave Security Updates 2021-001, watchOS 7.3, tvOS 14.4, iOS/iPadOS 14.4. Affected impact is denial of service when exploited remotely; no exploit details provided ...

CVE-2021-1766

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service...

CVE-2021-1766

CVE-2021-1766 affects Apple platforms and is triggered by processing a maliciously crafted image, leading to a denial of service. The entry confirms fixes in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4, ...

CVE-2021-1767

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to heap corruption...

CVE-2021-1767

CVE-2021-1767 : Apple fixed this issue in macOS Big Sur 11.2, macOS Security Updates for Catalina/Mojave, and iOS/iPadOS 14.4. The vulnerability allowed processing a maliciously crafted image to cause heap corruption, with an affected component implied to relate to image handling in macOS/iOS, pe...

CVE-2021-1763

CVE-2021-1763 – Apple USD processing buffer overflow : The issue affects macOS Big Sur 11.2, macOS Catalina 10.15.7 (Security Update 2021-001 Catalina), macOS Mojave 10.14.6 (Security Update 2021-001 Mojave), and iOS/iPadOS 14.4. Root cause: a buffer overflow in USD file processing, addressed by ...

CVE-2021-1758

CVE-2021-1758 is described in the public records as an out-of-bounds read that was addressed with improved bounds checking. It is fixed in macOS Big Sur 11.2, macOS Security Update 2021-001 Catalina and Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. The issue could allow a remote attac...

CVE-2021-1756

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker with physical access to a device may be able to see private contact information...

CVE-2021-1756

CVE-2021-1756 is an iOS/iPadOS vulnerability described as a lock screen issue that could allow access to private contacts on a device with physical access. The root cause relates to state management around contact handling on the lock screen; Apple fixed it in iOS 14.4 / iPadOS 14.4. The CVE is l...

CVE-2021-1754

CVE-2021-1754 affects macOS family (Big Sur 11.2; Catalina 10.15.7; Mojave 10.14.6), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Description: Processing a maliciously crafted image may lead to arbitrary code execution due to an issue addressed by Apple in the 2021-001 security updates. Root...