CVE-2021-1755

CVE-2021-1755 describes a lock-screen access issue that could allow access to contacts on a locked device (iOS and macOS contexts in the sources). The vulnerability is addressed with improved state management and is fixed in macOS Big Sur 11.0.1. Connected records confirm the incident involves lo...

CVE-2021-1746

CVE-2021-1746 affects Apple platforms (macOS Big Sur 11.2, Catalina 11.x/Pro, Mojave, watchOS, tvOS, iOS/iPadOS 14.4) where a maliciously crafted image could lead to arbitrary code execution. The issue is resolved via Apple security updates listed in the sources (e.g., HT212149/HT212147/HT212146/...

CVE-2021-1746

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1747

CVE-2021-1747 is an Apple macOS/iOS/tvOS/watchOS vulnerability describing an out-of-bounds write mitigated by improved input validation. Affected products include macOS Big Sur 11.2; Security Update 2021-001 Catalina and Mojave; iOS 14.4 / iPadOS 14.4; watchOS 7.3; tvOS 14.4. Impact: processing m...

CVE-2021-1743

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2021-1743

CVE-2021-1743 describes an out-of-bounds read that was mitigated by improved bounds checking. The issue is fixed in Apple platforms: macOS Big Sur 11.2; macOS Security Update 2021-001 for Catalina and Mojave; watchOS 7.3; tvOS 14.4; iOS 14.4; and iPadOS 14.4. Affected action: processing a malicio...

CVE-2021-1741

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2021-1741

CVE-2021-1741 is an out-of-bounds read in a macOS/iOS image-processing component. Processing a maliciously crafted image may lead to arbitrary code execution. It is fixed via macOS Big Sur 11.2, Security Update 2021-001 (Catalina 11.2, Mojave 11.2), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4.

CVE-2021-1738

CVE-2021-1738 is an out-of-bounds write vulnerability in macOS components that process images, enabling arbitrary code execution when handling a malicious image. Apple’s advisory (HT212147) attributes the issue to image processing paths and notes the root cause as an improper input validation/mem...

CVE-2020-29623

CVE-2020-29623 affects WebKitGTK/WebKit2GTK. The issue: the “Clear History and Website Data” function could fail to fully delete browsing history. Affected products include WebKitGTK-based stacks; upstream fixes exist and are reflected in package updates (e.g., Debian security advisory DSA-4877-1...

CVE-2020-29623

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete...

CVE-2020-29619

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may...

CVE-2020-29621

CVE-2020-29621 is an Apple macOS vulnerability reported across multiple sources. It affects the AppleMobileFileIntegrity component and allowed a malicious application to bypass Privacy preferences. Apple’s security updates fixed the issue in macOS Big Sur 11.1 and in Security Update 2020-001 Cata...

CVE-2020-29617

CVE-2020-29617 relates to an out-of-bounds read in ImageIO processing that could lead to heap corruption when handling maliciously crafted images. Affected software versions include tvOS 14.3; macOS Big Sur 11.1; Security Update 2020-001 Catalina and 2020-007 Mojave; iOS 14.3 and iPadOS 14.3; iCl...

CVE-2020-29620

CVE-2020-29620 affects macOS and relates to privilege escalation via entitlements. The issue is described as being addressed with improved entitlements and fixed in macOS Big Sur 11.1, Catalina Security Update 2020-001, and Mojave Security Update 2020-007. The Apple advisory HT212011 corroborates...

CVE-2020-29620

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges...

CVE-2020-29615

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted image may lead to a denial of servi...

CVE-2020-29614

CVE-2020-29614 affects Apple platforms and is described as a heap corruption issue triggered by processing a maliciously crafted file. The description lists affected releases and a fixed status: macOS Big Sur 11.2; Security Update 2021-001 Catalina and Mojave; macOS Big Sur 11.1; Security Update ...

CVE-2020-29610

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may disclose restricted...

CVE-2020-27949

CVE-2020-27949 involves a memory-access vulnerability in macOS DTrace probes via /dev/fasttrap that allowed a non-privileged process to read (and potentially write) memory of other processes traced under DTrace. The PoC exploit demonstrates creating probes in victim processes and replacing memory...