1840 matches found
CVE-2021-1873
An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text...
Memory corruption
A memory initialization issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to disclose kernel memory...
CVE-2021-30716
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An attacker in a privileged network position may be able to perform denial of service...
CVE-2021-1809
CVE-2021-1809 describes a memory corruption bug in Apple systems that allowed reading restricted memory due to insufficient validation. The issue is addressed by Apple security updates: macOS Catalina Security Update 2021-002, macOS Mojave Security Update 2021-003, iOS 14.5/iPadOS 14.5, watchOS 7...
CVE-2021-1828
CVE-2021-1828 corresponds to a memory corruption issue that Apple addressed via improved validation. Affected macOS versions include Big Sur 11.3 and Security Updates 2021-002 Catalina and 2021-003 Mojave. The vulnerability could allow an application to cause an unexpected system termination or w...
CVE-2021-1811
CVE-2021-1811 is a logic/state-management issue in Apple software where processing a maliciously crafted font can disclose process memory. Connected sources specify the affected products and versions: iTunes 12.11.3 for Windows; Security Update 2021-002 for Catalina; Security Update 2021-003 for ...
CVE-2021-1811
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciousl...
CVE-2020-27942
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing a maliciously crafted font file may lead to arbitrary code execution...
CVE-2021-1813
CVE-2021-1813 is a local privilege-escalation vulnerability in Apple software addressed by the 2021-002/2021-003 security updates for Catalina/Mojave and iOS 14.5/iPadOS 14.5 (and related watchOS/tvOS/macOS Big Sur 11.3). Connected sources describe it as a validation issue fixed by improved logic...
CVE-2021-1808
CVE-2021-1808 is a memory corruption issue in Apple platforms that could allow an application to read restricted memory. The authenticated root cause is improved validation that fixes a vulnerability in specific system updates. Affected software includes macOS (Catalina 2021-002, Mojave 2021-003)...
CVE-2021-1875
A double free issue was addressed with improved memory management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted file may lead to heap corruption...
CVE-2021-1883
CVE-2021-1883 is a heap corruption issue in the Heimdal component triggered while processing maliciously crafted server messages. Appleās security content (HT212531) shows it being fixed in macOS Mojave via Security Update 2021-004, with related fixes listed for other macOS versions (e.g., Catali...
CVE-2021-1883
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted server messages may lead to heap corruption...
CVE-2021-1884
A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. A remote attacker may be able to cause a denial of service...
CVE-2021-1881
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary cod...
CVE-2021-1873
An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text...
CVE-2021-1860
CVE-2021-1860 relates to a memory initialization issue in Apple platforms, addressed by memory handling improvements and fixed in Security Update 2021-002 (Catalina), 2021-003 (Mojave), and iOS 14.5 / iPadOS 14.5 / watchOS 7.4 / tvOS 14.5 / macOS Big Sur 11.3. A malicious application may be able ...
CVE-2021-1851
CVE-2021-1851 relates to a logic issue in Apple's OS kernel/state management that could allow an attacker to execute arbitrary code with kernel privileges. The vulnerability is fixed by Security Update 2021-002 for Catalina, Security Update 2021-003 for Mojave, and OS updates (iOS 14.5, iPadOS 14...
CVE-2021-1843
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution...
CVE-2021-30716
CVE-2021-30716 involves a logic issue fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, and Security Update 2021-004 Mojave. The vulnerability arises from improved state management, enabling an attacker in a privileged network position to cause a denial of service. Affected platform...