CVE-2021-30859

CVE-2021-30859 is a Kernel-type confusion vulnerability in Apple products. According to Apple advisories, it could allow a malicious application to execute arbitrary code with kernel/system privileges. The issue was addressed by Apple in macOS Big Sur 11.6 and Security Update 2021-005 Catalina, a...

CVE-2021-30858

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...

CVE-2021-30858

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...

CVE-2021-30858

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...

CVE-2021-30858

CVE-2021-30858 is a use-after-free in WebKit/WebKitGTK that could lead to arbitrary code execution when processing malicious web content. Apple patched this in iOS 14.8, iPadOS 14.8, and macOS Big Sur 11.6; Chromium/WebKit GTK ecosystems referenced the same vulnerability (WebKit/Gtk port). Some a...

CVE-2021-30855

CVE-2021-30855 is an Apple vulnerability in the Preferences component where a validation issue in the handling of symlinks could allow an application to access restricted files. The issue is addressed in Security Update 2021-005 Catalina, iOS 14.8/iPadOS 14.8 and iOS 15/iPadOS 15, watchOS 8, and ...

CVE-2021-30852

CVE-2021-30852 is a type-confusion issue in Apple’s Foundation component that can be triggered by processing malicious web content, potentially enabling arbitrary code execution. The vulnerability is addressed via memory-handling fixes and is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8,...

CVE-2021-30851

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

CVE-2021-30851

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

CVE-2021-30851

CVE-2021-30851 affects WebKitGTK and WPE WebKit. A memory corruption vulnerability could allow arbitrary code execution when processing malicious web content. Upstream fix is WebKitGTK/WebKit/WPE WebKit 2.34.1; Debian/Arch Linux advisories (DSA-4995/4996, ASA-202110-10) note remediation by upgrad...

PT-2021-19037 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 macOS Monterey versions prior to 12.1 tvOS versions prior to 15.2 Description: A permissions issue was addressed with improved validation, which may allow ...

PT-2021-19049 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 iOS versions prior to 15.2 iPadOS versions prior to 15.2 macOS Big Sur versions prior to 11.6.2 Description: An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafte...

PT-2021-4455 · Apple +7 · Ios +9

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 14.8 Apple iPadOS versions prior to 14.8 Apple macOS versions prior to Big Sur 11.6 Description: The issue is related to a use-after-free problem, which can be exploited by a remote attacker to execute arbitrary...

PT-2021-18945 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.1 iPadOS versions prior to 15.1 tvOS versions prior to 15.1 Description: A memory corruption issue was addressed with improved input validation, allowing an application to potentially execute arbitrary code with kerne...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and Apple iPadOS contain a security vulnerability that originated when an attacker with a privileged...

Apple iPadOS安全漏洞

Apple iPadOS is a set of operating systems for the iPad tablet computer from the American company Apple Apple. A security vulnerability exists in several Apple products that allows an attacker to view restricted content from the lock screen. The vulnerability is fixed in the following products an...

PT-2021-18977 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 tvOS versions prior to 15.2 Description: A memory corruption issue in the processing of ICC profiles was addressed with improv...

Apple 多款产品安全漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Apple watchOS is an operating system for smartwatches.Apple watchOS is an operati...

PT-2021-19000 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 watchOS versions prior to 8.3 iOS versions prior to 15.2 iPadOS versions prior to 15.2 tvOS versions prior to 15.2 Description: A buffer overflow issue was addressed with improved memory handling. Processing a...

Apple tvOS 安全漏洞

Apple tvOS is a set of smart TV operating systems from the American company Apple. A security vulnerability exists in several Apple products that stems from a type confusion issue. An attacker could cause code execution via maliciously crafted web content, which is fixed in iOS 14.8 and iPadOS...