3264 matches found
CVE-2021-1873
An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text...
CVE-2021-1873
CVE-2021-1873 concerns an API issue in Accessibility TCC permissions that could allow a malicious app to leak a user’s credentials from secure text fields. Connected sources confirm the root cause as an API permission handling flaw and state that the issue is fixed in macOS updates: Big Sur 11.3,...
CVE-2021-1861
An issue existed in determining cache occupancy. The issue was addressed through improved logic. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to track users by setting state in a cache...
CVE-2021-1861
The CVE-2021-1861 issue concerns a logic fault in how cache occupancy is determined in macOS Big Sur components (notably Safari) that could allow a malicious website to track users by setting state in a cache. The vulnerability is addressed in macOS Big Sur 11.3 via improved cache state managemen...
CVE-2021-1860
CVE-2021-1860 relates to a memory initialization issue in Apple platforms, addressed by memory handling improvements and fixed in Security Update 2021-002 (Catalina), 2021-003 (Mojave), and iOS 14.5 / iPadOS 14.5 / watchOS 7.4 / tvOS 14.5 / macOS Big Sur 11.3. A malicious application may be able ...
CVE-2021-1859
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. Locked Notes content may have been unexpectedly unlocked...
CVE-2021-1855
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to force unnecessary network connections to fetch its favicon...
CVE-2021-1855
CVE-2021-1855 describes a logic issue in Safari (macOS Big Sur WebKit/Safari cache/state handling) where a malicious webpage could trigger unnecessary network connections to fetch its favicon. The issue is fixed in macOS Big Sur 11.3. Affected product: macOS Big Sur 11.x prior to 11.3 (as disclos...
CVE-2021-1858
CVE-2021-1858 affects Apple OS components handling images. A vulnerability in processing a maliciously crafted image can lead to arbitrary code execution due to an out-of-bounds write, addressed by improved bounds checking. Fixed in Security Update 2021-002 Catalina, iOS 14.5/iPadOS 14.5, watchOS...
CVE-2021-1853
CVE-2021-1853 is a logic issue in APFS on macOS Big Sur 11.3 that could allow a local attacker to elevate privileges. The vulnerability is fixed in macOS Big Sur 11.3+. CVSS data from NVD indicates a Local attack vector with High/Partial impacts on confidentiality, integrity, and availability (ve...
CVE-2021-1853
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A local attacker may be able to elevate their privileges...
CVE-2021-1849
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences...
CVE-2021-1851
CVE-2021-1851 relates to a logic issue in Apple's OS kernel/state management that could allow an attacker to execute arbitrary code with kernel privileges. The vulnerability is fixed by Security Update 2021-002 for Catalina, Security Update 2021-003 for Mojave, and OS updates (iOS 14.5, iPadOS 14...
CVE-2021-1832
CVE-2021-1832 concerns copied files potentially not receiving the expected file permissions. The NVD entry notes this was addressed by improved permissions logic and is fixed in Apple Security Update 2021-002 for Catalina, and in iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11....
CVE-2021-1832
Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. The issue was addressed with improved permissions logic...
CVE-2021-1840
CVE-2021-1840 is a memory corruption vulnerability described as being fixed by macOS Big Sur 11.3 and Security Updates 2021-002 ( Catalina ) and 2021-003 ( Mojave). The description notes improved validation as the fix and indicates a local attacker could elevate privileges. Multiple connected sou...
CVE-2021-1843
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution...
CVE-2021-1843
CVE-2021-1843 affects Apple systems; the issue arises from processing a maliciously crafted image and could lead to arbitrary code execution. It is addressed by iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3, and Security Update 2021-002 (Catalina) / 2021-003 (Mojave). Root caus...
CVE-2021-1829
CVE-2021-1829 is a type confusion vulnerability in macOS Big Sur’s Wi‑Fi subsystem. The issue could allow an attacker to execute arbitrary code with kernel privileges. It is fixed in macOS Big Sur 11.3. The NVD notes a critical impact (CVSSv3.1: 9.8) with network vector, no user interaction requi...