CVE-2021-1877

Apple fixed an out-of-bounds read in the Kernel (iOS/iPadOS) with improved input validation, addressed in iOS 14.5 and iPadOS 14.5. A local user may have read kernel memory prior to patch. Affected component: Kernel on Apple devices; remediation: upgrade to 14.5 or later.

CVE-2021-1885

CVE-2021-1885 affects Apple platforms: macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. It is an out-of-bounds read vulnerability in image processing that could allow arbitrary code execution. The issue was addressed by improved bounds checking and is fixed in the listed OS ...

CVE-2021-30656

An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout...

CVE-2021-30656

CVE-2021-30656 describes a local access issue in Apple devices where memory management weaknesses could allow a malicious app to determine the kernel memory layout. The vulnerability is tied to Apple's iOS/iPadOS kernel components and is mitigated by updates in iOS 14.5 and iPadOS 14.5. Multiple ...

CVE-2021-1864

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code...

CVE-2021-1864

CVE-2021-1864 is a use-after-free vulnerability that was addressed with improved memory management. It affected Apple platforms and was fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code. The connected documen...

CVE-2021-30661

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

CVE-2021-30661

CVE-2021-30661 is a use-after-free vulnerability in WebKit Storage that could lead to arbitrary code execution when processing malicious web content. Affected: WebKit/WebKitGTK/WebKit Storage components on Apple platforms (Safari/WebKit on macOS/iOS/iPadOS, and WebKitGTK implementations) as descr...

CVE-2021-30661

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

CVE-2021-30661

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

CVE-2021-30653

CVE-2021-30653 is an Apple image-processing vulnerability addressed by Apple in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The public description states that processing a maliciously crafted image may lead to arbitrary code execution due to improved checks, with the fi...

CVE-2021-30652

A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges...

CVE-2021-30660

This CVE is a true issue: an out-of-bounds read vulnerability in Apple platforms. Root cause: insufficient bounds checking allowed reading beyond allocated kernel memory. Affected products/versions: macOS Big Sur 11.3, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5. Impact: potential disclosure of ...

CVE-2021-1882

CVE-2021-1882 is a memory corruption vulnerability in Apple software. Connected sources specify an issue that can allow an application to gain elevated privileges, with fixes in Security Update 2021-002 for Catalina, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11.3. The NVD/NC...

CVE-2021-1882

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges...

CVE-2021-1881

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary cod...

CVE-2021-1872

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute being enabled...

CVE-2021-1872

CVE-2021-1872 is a logic issue related to CallKit state management in Apple platforms. The issue could affect muting a CallKit call while ringing, where mute may not be enabled. It has been fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and macOS Big Sur 11.3. The NVD entry shows a CVSS v3.1 bas...

CVE-2021-1874

CVE-2021-1874 affects Apple devices (Kernel component) and is described as a logic issue related to state management that could allow an application to execute arbitrary code with kernel privileges. Technical details across connected sources consistently indicate the root cause is a state-managem...

CVE-2021-1874

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary code with kernel privileges...