CVE-2021-30824

CVE-2021-30824 is a memory corruption issue in macOS components that was fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. The vulnerability could allow a malicious application to execute arbitrary code with kernel privileges. Affected context and exact ...

CVE-2021-30817

CVE-2021-30817 concerns macOS Big Sur 11.5. A permissions issue was addressed with improved validation, potentially allowing a malicious application to access data about the accounts a user is using with Family Sharing. The public documentation assigns this to macOS Big Sur 11.5 as the fix versio...

CVE-2021-1821

CVE-2021-1821 is a logic issue in Apple OS components (notably networking-related paths) that was mitigated by state-management fixes. The vulnerability allowed denial of service when a user visited a malicious webpage, and Apple patched it in watchOS 7.6 and macOS Big Sur 11.5. The Apple securit...

CVE-2020-29629

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read restricted memory...

CVE-2020-9897

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1. Processing a maliciously crafted PDF may lead to arbitrary code execution...

CVE-2020-9897

CVE-2020-9897 affects Apple platforms via CoreGraphics. It describes an out-of-bounds write triggered by processing a maliciously crafted PDF, leading to potential arbitrary code execution. Root cause identified as improper input validation in the PDF handling path. Affected products include iOS/...

CVE-2020-10005

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. An attacker in a privileged network position may be able to perform denial of service...

CVE-2020-10005

CVE-2020-10005 is an Apple/macOS SMB server vulnerability disclosed by Talos describing a TREE_CONNECT stack buffer overflow caused by unsafe handling of very long share paths, enabling memory corruption and possible code execution. The public description notes a resource exhaustion/denial of ser...

About the security content of Safari 15.1

About the security content of Safari 15.1 This document describes the security content of Safari 15.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Vulnerabilities fixed in Apple macOS

Apple has fixed a large number of vulnerabilities in macOS Catalina, Big Sur and Monterey. The vulnerabilities allow a malicious party potentially able to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data...

About the security content of macOS Big Sur 11.6.1

About the security content of macOS Big Sur 11.6.1 This document describes the security content of macOS Big Sur 11.6..1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

CVE-2021-30850

An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6, tvOS 15. A user may gain access to protected parts of the file system...

CVE-2021-30832

A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges...

CVE-2021-30841

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution...

CVE-2021-30844

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A remote attacker may be able to leak memory...

CVE-2021-30832

A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges...

CVE-2021-30850

An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6, tvOS 15. A user may gain access to protected parts of the file system...

CVE-2021-30841

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution...

CVE-2021-30845

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local user may be able to read kernel memory...

CVE-2021-30827

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges...