CVE-2021-30933

CVE-2021-30933 describes a race condition in macOS that could allow a malicious application to execute arbitrary code with kernel privileges. Publicly documented impact states that this issue is fixed in macOS Monterey 12.0.1 and macOS Big Sur 11.6, implying kernel-level or memory/state handling ...

CVE-2021-30933

A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30930

CVE-2021-30930 is a logic-issue vulnerability affecting Apple software (notably WebRTC/WebKit components) that could allow an attacker to track users via their IP address. Apple’s entry for macOS Monterey 12.0.1 lists this CVE as fixed, addressing the state-management/privacy risk. The NVD entry ...

CVE-2021-30930

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. An attacker may be able to track users through their IP address...

CVE-2021-30929

CVE-2021-30929 is an out-of-bounds write vulnerability in macOS/iOS/macOS-related USD-file handling, fixed by bounds-check improvements. The issue could disclose memory contents when processing a maliciously crafted USD file. Affected software is macOS/macOS Monterey 12.1 and older Big Sur/ Catal...

CVE-2021-30924

A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1. A remote attacker can cause a device to unexpectedly restart...

CVE-2021-30920

CVE-2021-30920 affects macOS Monterey 12.0.x, with a permissions issue that allowed a local attacker to read sensitive information. Apple’s advisory for Monterey 12.0.1 documents a fix via improved validation and validation checks to address the vulnerability. The linked Apple security content no...

CVE-2021-30920

A permissions issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1. A local attacker may be able to read sensitive information...

CVE-2021-30919

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted PDF may lead...

CVE-2021-30916

CVE-2021-30916 is a memory corruption vulnerability in Apple’s Kernel that could allow a malicious app to execute arbitrary code with kernel privileges. The initial description notes fixes in iOS 15.1/iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1/iPadOS 14.8.1, Security Update 2021-007 Catalina,...

CVE-2021-30916

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with...

CVE-2021-30915

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A person with physical access to an iOS device may be able to determine...

CVE-2021-30913

The issue was addressed with improved permissions logic. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. An unprivileged application may be able to edit NVRAM variables...

CVE-2021-30912

CVE-2021-30912 affects macOS: a data-leak via Keychain access due to improved permissions logic. Fixes are in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. The issue is addressed in the Apple advisory; a malicious application could access a user’s Keychain it...

CVE-2021-30908

An authentication issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.1. A local attacker may be able to view the previous logged-in user’s desktop from the fast user switching screen...

CVE-2021-30909

CVE-2021-30909 describes a memory corruption issue in Apple’s kernel that could allow an attacker to execute arbitrary code with kernel privileges. The initial document indicates fixes in macOS Monterey 12.0.1 (and Security Update 2021-007 Catalina), iOS 15.1/iPadOS 15.1, iOS 14.8.1/iPadOS 14.8.1...

CVE-2021-30907

CVE-2021-30907 is observed in connected documents as an elevation-of-privileges issue affecting Apple watchOS, specifically the Audio component. The vulnerability can be exploited by a malicious application locally, requiring a single authentication step. Initial description notes an integer over...

CVE-2021-30907

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to elevat...

CVE-2021-30906

This issue was addressed with improved checks. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. A local attacker may be able to elevate their privileges...

CVE-2021-30906

CVE-2021-30906 is a local elevation-of-privileges flaw reported in the Apple watchOS/iCloud stack. The vulnerability can be exploited by a local attacker with a simple authentication, leading to higher privileges. The issue is addressed by Apple in their updates for iOS 15.1/iPadOS 15.1 and relat...