CVE-2021-1832

CVE-2021-1832 concerns copied files potentially not receiving the expected file permissions. The NVD entry notes this was addressed by improved permissions logic and is fixed in Apple Security Update 2021-002 for Catalina, and in iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11....

CVE-2021-1837

The CVE-2021-1837 entry corresponds to a certificate validation issue fixed in iOS 14.5 / iPadOS 14.5. Affected products are Apple iOS/iPadOS; vulnerability arises from improper certificate validation, enabling an attacker in a privileged network position to alter network traffic. Mitigation/repa...

CVE-2021-1837

A certificate validation issue was addressed. This issue is fixed in iOS 14.5 and iPadOS 14.5. An attacker in a privileged network position may be able to alter network traffic...

CVE-2021-1838

This issue was addressed with improved checks. This issue is fixed in iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1838

CVE-2021-1838 affects Apple iOS 14.4 / iPadOS 14.4 and is tied to the ImageIO component. A vulnerability in processing a maliciously crafted image may allow arbitrary code execution. Apple states the issue was fixed in 14.4 via improved checks. Connected sources corroborate this CVE entry and its...

CVE-2021-1843

CVE-2021-1843 affects Apple systems; the issue arises from processing a maliciously crafted image and could lead to arbitrary code execution. It is addressed by iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3, and Security Update 2021-002 (Catalina) / 2021-003 (Mojave). Root caus...

CVE-2021-1843

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1833

CVE-2021-1833 affects Apple iOS/iPadOS. The issue stems from permission checking/filtering that could allow an application to gain elevated privileges. Apple patched this in iOS 14.5 and iPadOS 14.5; update to these versions or later to mitigate. Public exploit details are not provided in the sup...

CVE-2021-1833

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to gain elevated privileges...

CVE-2021-1835

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to access notes from the lock screen...

CVE-2021-1835

CVE-2021-1835 concerns Apple iOS/iPadOS where a person with physical access could access notes from the lock screen. Affected: iOS/iPadOS prior to 14.5; Impact: confidentiality of notes could be exposed locally. The issue was fixed in iOS 14.5 and iPadOS 14.5 with improved checks. Metrics (NVD): ...

CVE-2021-1831

CVE-2021-1831 relates to an Apple Shortcuts permission issue where shortcuts could access restricted files due to insufficient permission checks. The vulnerability was addressed with improved permissions logic and fixed in iOS 14.5 / iPadOS 14.5 . Public documents in the connected set confirm the...

CVE-2021-1831

The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files...

CVE-2021-1836

CVE-2021-1836 is an Apple iOS/iPadOS/tvOS issue described as a logic issue that could allow a local user to create or modify privileged files. Connected sources confirm this CVE affects Apple platforms and was fixed in iOS 14.5 / iPadOS 14.5 / tvOS 14.5. The security content entry for CVE-2021-18...

CVE-2021-1836

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, tvOS 14.5. A local user may be able to create or modify privileged files...

CVE-2021-1830

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory...

CVE-2021-1830

CVE-2021-1830 is an Apple iOS/iPadOS kernel issue: an out-of-bounds read that was addressed by improved input validation and is fixed in iOS 14.5 / iPadOS 14.5. A local user may read kernel memory. Affected components are kernel-related memory access paths within Apple’s platforms; exploitation d...

CVE-2021-30664

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution...

CVE-2021-30664

CVE-2021-30664 is an Apple-core vulnerability affecting CoreAudio on macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The issue is an out-of-bounds write that is triggered when processing a maliciously crafted file, with the potential to execute arbitrary code. The fixed ver...

CVE-2021-30685

The CVE-2021-30685 issue concerns Apple platforms where parsing a maliciously crafted audio file may lead to disclosure of user information. Affected: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Root cause: improved checks addressed the is...