CVE-2021-30701

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30696

CVE-2021-30696 refers to a logic issue where an attacker in a privileged network position could misrepresent application state. The connected documents confirm affected macOS releases and fixes: macOS Big Sur 11.4, Catalina Security Update 2021-003, and Mojave Security Update 2021-004 addressed t...

CVE-2021-30718

CVE-2021-30718 affects macOS Big Sur prior to 11.4, where a non-privileged user could modify restricted settings. Apple fixed this in Big Sur 11.4 by improving checks/state handling in the affected area. No public exploit details are provided in the connected documents.

CVE-2021-30717

CVE-2021-30717 is a memory corruption issue in macOS components that has been addressed via state-management improvements. The vulnerability could allow an attacker in a privileged network position to execute arbitrary code. Affected products/versions, per the sources, include macOS Big Sur 11.4 ...

CVE-2021-30686

CVE-2021-30686 is an out-of-bounds read in the audio processing path (coreaudio) that could disclose restricted memory when handling a maliciously crafted audio file. Affected products include tvOS/iOS/iPadOS up to 14.6, watchOS 7.5, macOS Big Sur 11.4, and macOS Security Update 2021-003; fixed b...

CVE-2021-30686

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted audio file may disclose restricted memory...

CVE-2021-30691

CVE-2021-30691 is an information-disclosure issue fixed by Apple in macOS Big Sur 11.4 and corresponding Security Updates ( Catalina 11.4- 2021-003, Mojave 11.4- 2021-004 ) and iOS/iPadOS 14.6. The vulnerability arises when processing a maliciously crafted USD file, which may disclose memory cont...

CVE-2021-30671

CVE-2021-30671 describes a validation issue in macOS that allowed a malicious application to send unauthorized Apple events to Finder. The issue is addressed by improved logic and is fixed in macOS Big Sur 11.4 and Security Update 2021-003 Catalina (MACOS HT212529/HT212530). In affected systems r...

CVE-2021-30671

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to send unauthorized Apple events to Finder...

CVE-2021-30677

This CVE-2021-30677 describes a sandbox escape vulnerability in Apple platforms addressed by updated environment sanitization. Affected products include tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, and watchOS 7.5. The r...

CVE-2021-30668

CVE-2021-30668 affects macOS Big Sur, where a local attacker with physical access could bypass the Login Window during a software update. The issue was addressed by Apple with improved checks and is fixed in macOS Big Sur 11.4. The public descriptions note a logic/state management improvement, en...

CVE-2021-30672

CVE-2021-30672 describes a memory-corruption issue addressed by improved state management. Public fixes are in macOS Big Sur 11.4, macOS Security Update 2021-004 (Catalina), and Security Update 2021-005 (Mojave). A malicious application may gain root privileges due to this vulnerability. Remediat...

CVE-2021-30665

CVE-2021-30665 is a memory corruption vulnerability in WebKitGTK/WebKit (before 2.32.3) that can lead to arbitrary code execution when processing malicious web content. It is listed in multiple advisories across WebKitGTK/WebKit and Apple platforms (watchOS/iOS/iPadOS/macOS/tvOS) with exploitatio...

CVE-2021-30665

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that...

CVE-2021-30782

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to access restricted files...

CVE-2021-30784

Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.5. A local attacker may be able to execute code on the Apple T2 Security Chip...

CVE-2021-30796

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing a maliciously crafted image may lead to a denial of service...

CVE-2021-30782

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to access restricted files...

CVE-2021-30783

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2021-30793

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges...