CVE-2021-1864

CVE-2021-1864 is a use-after-free vulnerability that was addressed with improved memory management. It affected Apple platforms and was fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code. The connected documen...

CVE-2021-30661

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

CVE-2021-30661

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

CVE-2021-30661

CVE-2021-30661 is a use-after-free vulnerability in WebKit Storage that could lead to arbitrary code execution when processing malicious web content. Affected: WebKit/WebKitGTK/WebKit Storage components on Apple platforms (Safari/WebKit on macOS/iOS/iPadOS, and WebKitGTK implementations) as descr...

CVE-2021-30661

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

CVE-2021-30653

CVE-2021-30653 is an Apple image-processing vulnerability addressed by Apple in macOS Big Sur 11.3, iOS 14.5, iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The public description states that processing a maliciously crafted image may lead to arbitrary code execution due to improved checks, with the fi...

CVE-2021-30652

A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges...

CVE-2021-30660

This CVE is a true issue: an out-of-bounds read vulnerability in Apple platforms. Root cause: insufficient bounds checking allowed reading beyond allocated kernel memory. Affected products/versions: macOS Big Sur 11.3, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5. Impact: potential disclosure of ...

CVE-2021-30660

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to disclose kernel memory...

CVE-2021-1882

CVE-2021-1882 is a memory corruption vulnerability in Apple software. Connected sources specify an issue that can allow an application to gain elevated privileges, with fixes in Security Update 2021-002 for Catalina, iOS 14.5/iPadOS 14.5, watchOS 7.4, tvOS 14.5, and macOS Big Sur 11.3. The NVD/NC...

CVE-2021-1882

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges...

CVE-2021-1881

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary cod...

CVE-2021-1872

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute being enabled...

CVE-2021-1872

CVE-2021-1872 is a logic issue related to CallKit state management in Apple platforms. The issue could affect muting a CallKit call while ringing, where mute may not be enabled. It has been fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, and macOS Big Sur 11.3. The NVD entry shows a CVSS v3.1 bas...

CVE-2021-1880

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1880

CVE-2021-1880 affects macOS Big Sur ImageIO: processing a maliciously crafted image may lead to arbitrary code execution. Fixed in macOS Big Sur 11.3 and watchOS 7.4. Documentation confirms the vulnerability and patch target, but deeper root-cause details are not provided beyond ImageIO handling ...

CVE-2021-1860

CVE-2021-1860 relates to a memory initialization issue in Apple platforms, addressed by memory handling improvements and fixed in Security Update 2021-002 (Catalina), 2021-003 (Mojave), and iOS 14.5 / iPadOS 14.5 / watchOS 7.4 / tvOS 14.5 / macOS Big Sur 11.3. A malicious application may be able ...

CVE-2021-1858

CVE-2021-1858 affects Apple OS components handling images. A vulnerability in processing a maliciously crafted image can lead to arbitrary code execution due to an out-of-bounds write, addressed by improved bounds checking. Fixed in Security Update 2021-002 Catalina, iOS 14.5/iPadOS 14.5, watchOS...

CVE-2021-1849

CVE-2021-1849 concerns an issue in code signature validation that allowed bypassing Privacy preferences. It affects Apple platforms and was fixed in macOS Big Sur 11.3, iOS 14.5/iPadOS 14.5, watchOS 7.4, and tvOS 14.5. The vulnerability’s root cause is described as insufficient checks in code sig...

CVE-2021-1849

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences...