CVE-2021-30662

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution...

CVE-2021-30662

CVE-2021-30662 affects Apple iOS/iPadOS; processing a maliciously crafted file may lead to arbitrary code execution. Apple fixed this with iOS 14.5 and iPadOS 14.5. Public references note associated updates in Apple’s security content. Other connected records reiterate the same remediation date a...

CVE-2021-1865

An issue obscuring passwords in screenshots was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible on screen...

CVE-2021-1865

CVE-2021-1865 concerns a log-in credential leak where passwords could be visible in screenshots on iOS devices. The issue is described as a rendering/validation problem that allowed a user’s password to appear onscreen. Affected software is iOS and iPadOS, with fixed behavior implemented in iOS 1...

CVE-2021-1863

An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number...

CVE-2021-1863

CVE-2021-1863 affects Apple iOS/iPadOS with an NFC tag action authentication flaw. The issue could allow a person with physical access to an iOS device to place calls to any number. Apple fixed it in iOS 14.5 / iPadOS 14.5 by improving action authentication. Connected sources corroborate the vuln...

CVE-2021-1862

CVE-2021-1862 describes an information-disclosure issue on Apple devices where a person with physical access could potentially access contacts via Siri search. The vulnerability affects iOS and iPadOS prior to 14.5 and is addressed in iOS 14.5 / iPadOS 14.5 with improved logic for Siri search acc...

CVE-2021-1862

Description: A person with physical access may be able to access contacts. This issue is fixed in iOS 14.5 and iPadOS 14.5. Impact: An issue with Siri search access to information was addressed with improved logic...

CVE-2021-1860

CVE-2021-1860 relates to a memory initialization issue in Apple platforms, addressed by memory handling improvements and fixed in Security Update 2021-002 (Catalina), 2021-003 (Mojave), and iOS 14.5 / iPadOS 14.5 / watchOS 7.4 / tvOS 14.5 / macOS Big Sur 11.3. A malicious application may be able ...

CVE-2021-1854

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops...

CVE-2021-1854

CVE-2021-1854 describes a call-termination issue in iOS/iPadOS where a legacy cellular network could automatically answer an incoming call when a current call ended or dropped. The root cause is described as a logic flaw in call termination that was addressed with improved logic. Affected product...

CVE-2021-1852

CVE-2021-1852 relates to an out-of-bounds read in the Apple kernel exposed on iOS and iPadOS. The underlying issue was addressed by improved input validation, and patches were released in iOS 14.5 and iPadOS 14.5. A local user could potentially read kernel memory. Public documents from Apple and ...

CVE-2021-1852

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory...

CVE-2021-1858

CVE-2021-1858 affects Apple OS components handling images. A vulnerability in processing a maliciously crafted image can lead to arbitrary code execution due to an out-of-bounds write, addressed by improved bounds checking. Fixed in Security Update 2021-002 Catalina, iOS 14.5/iPadOS 14.5, watchOS...

CVE-2021-1848

The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher...

CVE-2021-1848

CVE-2021-1848 affects Apple iOS and iPadOS; a local user could view sensitive information in the app switcher due to UI handling issues. The issue is addressed in iOS 14.5 and iPadOS 14.5 with fixes described as improved UI handling. Public references (NVD, Red Hat advisory) confirm the local-acc...

CVE-2021-1849

CVE-2021-1849 concerns an issue in code signature validation that allowed bypassing Privacy preferences. It affects Apple platforms and was fixed in macOS Big Sur 11.3, iOS 14.5/iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The vulnerability’s root cause is described as insufficient checks in code sig...

CVE-2021-1849

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences...

CVE-2021-1851

CVE-2021-1851 relates to a logic issue in Apple's OS kernel/state management that could allow an attacker to execute arbitrary code with kernel privileges. The vulnerability is fixed by Security Update 2021-002 for Catalina, Security Update 2021-003 for Mojave, and OS updates (iOS 14.5, iPadOS 14...

CVE-2021-1832

Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. The issue was addressed with improved permissions logic...