Vulnerabilities

TI-2021-11364 CVE-2021-31000

Incorrect default permissions in Apple watchOS

LOW 17

A permissions issue was addressed with improved validation.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00673 Published 2021-08-24 Fixed in 8.3, 15.2 +1 CWE-276

TI-2021-11359 CVE-2021-30995

Race condition in Apple watchOS

LOW 35

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.02357 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-362

TI-2021-11357 CVE-2021-30993

Buffer overflow in Apple watchOS

MEDIUM 40

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02345 Published 2021-08-24 Fixed in 8.3, 15.2 +1 CWE-120

TI-2021-11345 CVE-2021-30980

Use after free in Apple watchOS

LOW 37

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01422 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-416

TI-2021-11335 CVE-2021-30968

Link following in Apple watchOS

LOW 27

A validation issue related to hard link behavior was addressed with improved sandbox restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01065 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-59

TI-2021-11333 CVE-2021-30966

Apple watchOS: User traffic might unexpectedly be leaked to a proxy server despite PAC…

LOW 36

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01502 Published 2021-08-24 Fixed in 8.3, 15.2 +1

TI-2021-11331 CVE-2021-30964

Incorrect permission assignment in Apple watchOS

LOW 26

An inherited permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00844 Published 2021-08-24 Fixed in 8.3, 15.2 +1 CWE-732

TI-2021-11327 CVE-2021-30960

Buffer overflow in Apple watchOS

LOW 27

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01008 Published 2021-08-24 Fixed in 8.3, 15.2 +1 CWE-120

TI-2021-11325 CVE-2021-30958

Out-of-bounds read in Apple watchOS

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01142 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-125

TI-2021-11324 CVE-2021-30957

Buffer overflow in Apple watchOS

LOW 37

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01316 Published 2021-08-24 Fixed in 8.3, 15.2 +1 CWE-120

TI-2021-11322 CVE-2021-30955

Race condition in Apple watchOS

LOW 39

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.04787 Published 2021-08-24 Fixed in 8.3, 15.2 +1 CWE-362

TI-2021-11316 CVE-2021-30949

Out-of-bounds write in Apple watchOS

LOW 38

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02075 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-787

TI-2021-11314 CVE-2021-30947

Apple watchOS: An application may be able to access a user's files

LOW 26

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00868 Published 2021-08-24 Fixed in 8.3, 15.2 +2

TI-2021-11313 CVE-2021-30946

Apple watchOS: A malicious application may be able to bypass certain Privacy preferences

LOW 27

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.009 Published 2021-08-24 Fixed in 8.3, 15.2 +2

TI-2021-11312 CVE-2021-30945

Apple watchOS: A local attacker may be able to elevate their privileges

LOW 34

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00307 Published 2021-08-24 Fixed in 8.3, 15.2 +3

TI-2021-11311 CVE-2021-30944

Apple watchOS: A malicious app may be able to access data from other apps by enabling…

LOW 26

Description: A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00791 Published 2021-08-24 Fixed in 8.3, 15.2 +1

TI-2021-11310 CVE-2021-30943

Insufficient session expiration in Apple watchOS

LOW 21

An issue in the handling of group membership was resolved with improved logic.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00802 Published 2021-08-24 Fixed in 8.3, 15.2 +1 CWE-613

TI-2021-11309 CVE-2021-30942

Out-of-bounds write in Apple watchOS

LOW 37

Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01509 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-787

TI-2021-11306 CVE-2021-30939

Out-of-bounds read in Apple watchOS

MEDIUM 41

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0405 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-125

TI-2021-11304 CVE-2021-30937

Out-of-bounds write in Apple watchOS

MEDIUM 51

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.17294 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-787

TI-2021-11294 CVE-2021-30927

Use after free in Apple watchOS

LOW 34

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0035 Published 2021-08-24 Fixed in 8.3, 15.2 +3 CWE-416

TI-2021-11293 CVE-2021-30926

Out-of-bounds write in Apple watchOS

LOW 37

Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0132 Published 2021-08-24 Fixed in 8.3, 15.2 +1 CWE-787

Vulnerabilities

Filters