3264 matches found
CVE-2021-30970
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences...
CVE-2021-30969
A path handling issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Processing a maliciously crafted URL may cause unexpected JavaScript execution from a file on disk...
CVE-2021-30969
CVE-2021-30969 describes a path-handling vulnerability in macOS Help Viewer. The issue could allow processing a malicious URL to trigger unexpected JavaScript execution from a file on disk. Apple’s advisories indicate fixes were delivered in Security Update 2021-008 for macOS Catalina and also in...
CVE-2021-30965
CVE-2021-30965 involves a logic/state-management issue in macOS components that can cause a denial of service to Endpoint Security clients. Affected products/versions per the sources: macOS Monterey 12.1, Security Update 2021-008 Catalina, and macOS Big Sur 11.6.2. Remediation: update to Monterey...
CVE-2021-30963
CVE-2021-30963 affects macOS CoreAudio. A buffer overflow in handling audio content was fixed in Security Update 2021-008 ( Catalina ) and Big Sur 11.6.2. Public description notes parsing a maliciously crafted audio file may disclose user information. The Apple security content (HT212981/HT212979...
CVE-2021-30963
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...
CVE-2021-30962
A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...
CVE-2021-30961
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...
CVE-2021-30959
The CVE-2021-30959 entry affects macOS CoreAudio on macOS Catalina and Big Sur. It corresponds to a buffer overflow in parsing a malicious audio file, with memory handling improvements as the underlying fix. Apple’s Security Update 2021-008 Catalina and Big Sur 11.6.2 address this issue. The vuln...
CVE-2021-30959
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...
CVE-2021-30958
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Playing a malicious audio file may lead to arbitrary code execution...
CVE-2021-30949
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel...
CVE-2021-30947
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to access a user's files...
CVE-2021-30947
CVE-2021-30947 affects Apple platforms (macOS Big Sur, Monterey; iOS/iPadOS 15.2; tvOS 15.2; watchOS 8.3). Root cause: an access issue addressed by implementing additional sandbox restrictions, potentially allowing an application to access a user’s files. Fixes are in macOS Big Sur 11.6.2, macOS ...
CVE-2021-30941
CVE-2021-30941 is a buffer overflow vulnerability addressed by Apple in macOS Monterey 12.1, iOS 15.2, iPadOS 15.2, macOS Big Sur 11.6.2, and Security Update 2021-008 Catalina. The issue arises during processing of a maliciously crafted USD file, with the underlying problem described as improved ...
CVE-2021-30940
CVE-2021-30940 is a memory handling vulnerability described as a buffer overflow when processing a malicious USD file, potentially disclosing memory contents. Affected products/versions (per provided documents): macOS Big Sur 11.6.2 and Security Update 2021-008 Catalina; macOS Monterey 12.1; iOS ...
CVE-2021-30935
CVE-2021-30935 is a logic-issue in CoreBluetooth that could allow code execution with kernel privileges. Public references tie the fix to macOS Security Update 2021-008 Catalina (and related Big Sur/ Monterey updates). Affected components include Kernel-level pathways via CoreBluetooth; impact is...
CVE-2021-30933
CVE-2021-30933 describes a race condition in macOS that could allow a malicious application to execute arbitrary code with kernel privileges. Publicly documented impact states that this issue is fixed in macOS Monterey 12.0.1 and macOS Big Sur 11.6, implying kernel-level or memory/state handling ...
CVE-2021-30933
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges...
CVE-2021-30931
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. A malicious application may be able to disclose kernel memory...