CVE-2021-1803

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A local application may be able to enumerate the user's iCloud documents...

CVE-2021-1802

CVE-2021-1802 : A logic issue was addressed with improved state management and is fixed in macOS Big Sur 11.2, and Security Update 2021-001 for Catalina (10.15.x) and Mojave (10.14.x). The vulnerability enables a local privilege escalation as described in the sources; exploitation details are not...

CVE-2021-1797

CVE-2021-1797 affects Apple APFS on macOS (Mojave/Catalina) and related OSes. The issue, caused by inadequate permissions logic, could allow a local user to read arbitrary files. Apple patched this in macOS Big Sur 11.2 and Security Updates 2021-001 Catalina/Mojave, plus watchOS 7.3, tvOS 14.4, i...

CVE-2021-1797

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files...

CVE-2021-1786

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files...

CVE-2021-1782

CVE-2021-1782 is an iOS/XNU in-the-wild vulnerability in the IPC vouchers subsystem. Project Zero details a race window around user_data handling: an non-atomic increment of e_made in a user_data_value_element can desynchronize with ivace->ivace_made, enabling a race between releasing and revi...

CVE-2021-1777

CVE-2021-1777 affects Apple macOS/iOS/watchOS/tvOS image processing, with the issue fixed in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, plus corresponding watchOS/tvOS/iOS updates. The vulnerability description states that processing a maliciously crafted image may l...

CVE-2021-1778

An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafte...

CVE-2021-1773

CVE-2021-1773 is an ImageIO-related logic issue in macOS/iOS/watchOS/tvOS where processing a maliciously crafted image can cause a denial of service. The root cause is improved state management. It is fixed in Apple updates: macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave,...

CVE-2021-1774

CVE-2021-1774 affects Apple platforms via processing a maliciously crafted image, with potential arbitrary code execution. The issue is addressed in macOS Big Sur 11.2, Catalina 11.2 Security Update 2021-001 Mojave 11.2, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4, per Apple advisory and NVD...

CVE-2021-1774

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1772

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted text file may lead to arbitrary code...

CVE-2021-1772

CVE-2021-1772 (Apple OS family) involves a race-condition in the voucher subsystem used to manage user_data attributes. The non-atomic increment of the user_data element’s e_made counter, coupled with an in-flight revocation/redeem path, can create a window where a live user_data_value_element is...

CVE-2021-1769

CVE-2021-1769 describes a logic issue in macOS/iOS/watchOS/tvOS/iPadOS components where improved validation fixes allow bypassing Pointer Authentication. The vulnerability is triggered by a malicious attacker with arbitrary read/write capabilities and results in potential bypass of Pointer Authen...

CVE-2021-1766

CVE-2021-1766 affects Apple platforms and is triggered by processing a maliciously crafted image, leading to a denial of service. The entry confirms fixes in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4, and iPadOS 14.4, ...

CVE-2021-1767

CVE-2021-1767 : Apple fixed this issue in macOS Big Sur 11.2, macOS Security Updates for Catalina/Mojave, and iOS/iPadOS 14.4. The vulnerability allowed processing a maliciously crafted image to cause heap corruption, with an affected component implied to relate to image handling in macOS/iOS, pe...

CVE-2021-1765

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2021-1765

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy...

CVE-2021-1765

CVE-2021-1765 affects WebKitGTK/WebKit2GTK prior to version 2.30.6. The issue is described as an iframe sandboxing policy violation that could allow malicious web content to bypass sandbox restrictions. Fixed upstream in WebKitGTK/WebKit2GTK 2.30.6 (and WPE WebKit), with distributions (e.g., Debi...

CVE-2021-1763

CVE-2021-1763 – Apple USD processing buffer overflow : The issue affects macOS Big Sur 11.2, macOS Catalina 10.15.7 (Security Update 2021-001 Catalina), macOS Mojave 10.14.6 (Security Update 2021-001 Mojave), and iOS/iPadOS 14.4. Root cause: a buffer overflow in USD file processing, addressed by ...