CVE-2021-1826

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting...

CVE-2021-1817

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-1817

CVE-2021-1817 is a memory corruption bug in Apple WebKit/WebKitGTK components exploited by processing maliciously crafted web content. Affected in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, tvOS 14.5; remediation is to upgrade to the fixed OS versions (e.g., macOS Big Sur 11.3+, iOS/...

CVE-2021-1817

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-1817

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-1740

CVE-2021-1740 involves a parsing issue in how directory paths are handled on Apple platforms. The underlying problem is improper path validation, enabling a local user to modify protected parts of the file system. Affected products and OS versions include macOS Big Sur 11.3, macOS Catalina (Secur...

CVE-2021-1811

CVE-2021-1811 is a logic/state-management issue in Apple software where processing a maliciously crafted font can disclose process memory. Connected sources specify the affected products and versions: iTunes 12.11.3 for Windows; Security Update 2021-002 for Catalina; Security Update 2021-003 for ...

CVE-2021-1811

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciousl...

CVE-2021-1807

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4. A local user may be able to write arbitrary files...

CVE-2021-1807

CVE-2021-1807 is an Apple Safari input validation issue that allows a local user to write arbitrary files. The vulnerability stems from inadequate input sanitization; it is fixed in iOS 14.5 / iPadOS 14.5 / watchOS 7.4. Affected products include Apple Safari on those platforms. The CVE entry note...

CVE-2021-1812

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2021-1812

Apple CVE-2021-1812 is an Apple CoreMotion logic issue fixed in iOS 14.5/iPadOS 14.5 that could allow a malicious app to execute arbitrary code with system privileges. Affected product: Apple iOS/iPadOS devices; root cause described as improved validation. Exploitation details are not provided in...

CVE-2021-1822

CVE-2021-1822 is described by Apple/security advisories as a logic issue in MobileInstallation that could allow a local user to modify protected parts of the file system. The vulnerability is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. Connected sources corroborate that MobileI...

CVE-2021-1770

A buffer overflow may result in arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A logic issue was addressed with improved state management...

CVE-2021-1770

CVE-2021-1770 describes a buffer overflow exposure in Apple systems. Affected products include macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5, where the issue is mitigated by the Big Sur 11.3/iOS 14.5/iPadOS 14.5/watchOS 7.4/tvOS 14.5 updates that address the overflow and a...

CVE-2021-1825

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

CVE-2021-1825

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

CVE-2021-1825

CVE-2021-1825 is a WebKit/WebKit-related input validation issue that could enable cross-site scripting when processing malicious web content. Apple’s security content for Safari 14.1 and related WebKit components lists this CVE under WebKit’s input validation and notes it is fixed in Safari 14.1 ...

CVE-2021-1825

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

CVE-2021-1816

CVE-2021-1816 corresponds to a kernel countermeasure in Apple devices. The description indicates a buffer overflow in the Apple Kernel that was mitigated by improved bounds checking, with patches in iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The vulnerability could allow a malicious local...