PT-2021-18962 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.6.1 macOS Monterey versions prior to 12.0.1 iOS versions prior to 15.1 iPadOS versions prior to 15.1 macOS Catalina versions without Security Update 2021-007 Description: An out-of-bounds read issue was...

PT-2021-18960 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.1 iPadOS versions prior to 15.1 macOS Monterey versions prior to 12.0.1 iOS versions prior to 14.8.1 iPadOS versions prior to 14.8.1 tvOS versions prior to 15.1 watchOS versions prior to 8.1 macOS Big Sur versions pri...

Apple tvOS 资源管理错误漏洞

Apple tvOS is a set of smart TV operating systems from the U.S. company Apple. A resource management error vulnerability exists in multiple Apple products, which can be exploited by applications to execute arbitrary code using kernel privileges. The vulnerability is fixed in the following product...

PT-2021-18955

Name of the Vulnerable Software and Affected Versions macOS Monterey versions prior to 12.0.1 Description A sync issue was addressed with improved state validation. This issue may cause a user's messages to continue syncing after the user has signed out of iMessage. Recommendations For macOS...

CVE-2021-30943: Insufficient Session Expiration

An issue in the handling of group membership was resolved with improved logic. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1. A malicious user may be able to leave a messages group but continue to receive messages in that group...

CVE-2021-30986: Undefined Security Weakness

A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address...

CVE-2021-30895: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, tvOS 15.1, watchOS 8.1, macOS Monterey 12.0.1. A malicious application may be able to access information about a user's contacts...

CVE-2021-30957: Buffer Copy without Checking Size of Input

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2021-30905: Out-of-bounds Read

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information...

CVE-2021-30954: Access of Resource Using Incompatible Type

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30888: URL Redirection to Untrusted Site

An information leakage issue was addressed. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1. A malicious website using Content Security Policy reports may be able to leak information via redirect behavior...

CVE-2021-31005: Undefined Security Weakness

Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, macOS Monterey 12.0.1. Turning off "Block all remote content" may not apply to all remote content types...

CVE-2021-31009: Undefined Security Weakness

Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS Monterey 12.1. Multiple issues in HDF5...

多款Apple产品安全漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Monterey is the 18th major version of macOS, the operating system for the Macintosh desktop. A security vulnerability exist...

Apple macOS 竞争条件问题漏洞

Apple macOS Big Sur and Apple macOS Monterey are both products of Apple Inc.Apple macOS Big Sur is the 17th major release of macOS, Apple's operating system for the MAC.Apple macOS Monterey is the The 18th major release of macOS for the Macintosh desktop operating system macOS. A security...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Monterey before 12.0.1. An attacker may be able to track users by their IP address...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. Apple macOS Monterey suffers from a privilege-granting and access-control issue vulnerability that stems from the fact that devices may be tracked via BSSID...

CVE-2021-30899: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges...

Apple tvOS 输入验证错误漏洞

Apple tvOS is a set of smart TV operating systems from the American company Apple. An input validation error vulnerability exists in multiple Apple products, where a malicious application could elevate privileges. The vulnerability is fixed in the following products and versions: iOS 15.1 and...

CVE-2021-30923: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to execute arbitrary code with kernel privileges...