CVE-2021-31007

CVE-2021-31007 pertains to a permissions issue fixed in iOS/iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, and macOS Monterey 12.1. The Apple security content ties the vulnerability to the FileProvider component, describing that a malicious application may bypass Privacy preferences d...

CVE-2021-31006

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-31006

CVE-2021-31006 affects Apple platforms (macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7) where a permissions issue could allow a malicious application to bypass certain Privacy preferences. Root cause is unclear in the Initial document, but Apple lists the vulnerability as a permissions issue resolved...

CVE-2021-31000

CVE-2021-31000 is described in Apple security updates as a permissions issue that could allow a malicious app to read sensitive contact information. The Apple advisories (HT212978 for macOS Monterey 12.1 and related entries) tie this CVE to the Game Center component and note fixes in iOS 15.2/iPa...

CVE-2021-31000

A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious application may be able to read sensitive contact information...

CVE-2021-30995

CVE-2021-30995 is a race-condition vulnerability in Apple platforms. The issue concerns improved state handling that could allow a malicious application to elevate privileges. Publicly listed fixes include macOS Big Sur 11.6.2; macOS Monterey 12.1; tvOS 15.2; Security Update 2021-008 Catalina; iO...

CVE-2021-30993

CVE-2021-30993 involves a kernel-level buffer overflow in Apple’s OS stack. The description confirms a memory handling issue that could allow an attacker in a privileged network position to execute arbitrary code. Publicly documented fixes target macOS Monterey 12.1 and Apple OS updates for watch...

CVE-2021-30993

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. An attacker in a privileged network position may be able to execute arbitrary code...

CVE-2021-30984

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30968

CVE-2021-30968 is a validation issue in hard link handling that Apple fixed via sandbox restrictions across multiple OS updates. Public details show the bug being addressed in macOS Big Sur 11.6.2, macOS Monterey 12.1, tvOS 15.2, iOS 15.2/iPadOS 15.2, watchOS 8.3, and Security Update 2021-008 Cat...

CVE-2021-30966

CVE-2021-30966 is a logic issue in CFNetwork Proxies that could cause user traffic to be leaked to a proxy server despite PAC configurations. Public details in Apple security updates show the issue affects macOS Monterey 12.1 (and related updates for other Apple platforms) and was addressed in Mo...

CVE-2021-30966

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. User traffic might unexpectedly be leaked to a proxy server despite PAC configurations...

CVE-2021-30964

CVE-2021-30964 describes an inherited permissions issue that could allow a malicious application to bypass Privacy preferences. The issue is fixed in Apple OS updates: macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. The CVE is categorized under privacy controls (TCC) and involves bypa...

CVE-2021-30964

An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. A malicious application may be able to bypass Privacy preferences...

CVE-2021-30960

CVE-2021-30960 concerns a buffer overflow in the Audio handling path of macOS. Public documentation indicates the issue is fixed in macOS Big Sur 11.6.3 and is also addressed in macOS Monterey 12.1 across the Audio stack. The vulnerability could be triggered by parsing a maliciously crafted audio...

CVE-2021-30960

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30957

CVE-2021-30957 is an Apple vulnerability describing a buffer overflow in CoreAudio that could allow arbitrary code execution when processing a malicious audio file. It affects macOS Monterey 12.1 and iOS/iPadOS/watchOS/tvOS releases listed for that fix (e.g., macOS Monterey 12.1, iOS 15.2, iPadOS...

CVE-2021-30957

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2021-30955

A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30955

CVE-2021-30955 describes a race condition in Apple's iOS/macOS kernel handling that could allow a malicious user-space app to gain kernel privileges. The initial entry notes a fix in macOS Monterey 12.1 and corresponding iOS/iPadOS/watchOS/tvOS updates (12.1/15.2), addressing a race-condition wit...