Vulnerabilities

TI-2021-11371 CVE-2021-31008

Type confusion in Apple iOS and iPadOS

MEDIUM 41

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01286 Published 2021-08-24 Fixed in 15, 12.0 +2 CWE-843

TI-2021-11368 CVE-2021-31005

Apple iOS and iPadOS: Turning off "Block all remote content" may not apply to all remote…

LOW 35

Description: A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00896 Published 2021-08-24 Fixed in 15, 12.0

TI-2021-11367 CVE-2021-31004

Race condition in Apple macOS

LOW 31

A race condition was addressed with improved locking.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00476 Published 2021-08-24 Fixed in 11.5, 12.0 CWE-362

TI-2021-11366 CVE-2021-31002

Out-of-bounds read in Apple macOS

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00866 Published 2021-08-24 Fixed in 11.6, 12.0 CWE-125

TI-2021-11358 CVE-2021-30994

Apple macOS: A malicious application may be able to access local users' Apple IDs

LOW 17

An access issue was addressed with improved access restrictions.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00572 Published 2021-08-24 Fixed in 12.0

TI-2021-11300 CVE-2021-30933

Race condition in Apple macOS

LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00723 Published 2021-08-24 Fixed in 11.6, 12.0 CWE-362

TI-2021-11298 CVE-2021-30931

Apple macOS: A malicious application may be able to disclose kernel memory

LOW 27

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0089 Published 2021-08-24 Fixed in 12.0, 11.6 +1

TI-2021-11297 CVE-2021-30930

Apple macOS: An attacker may be able to track users through their IP address

LOW 26

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00869 Published 2021-08-24 Fixed in 12.0

TI-2021-11291 CVE-2021-30924

Apple macOS: A remote attacker can cause a device to unexpectedly restart

LOW 37

A denial of service issue was addressed with improved state handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0233 Published 2021-08-24 Fixed in 12.0

TI-2021-11290 CVE-2021-30923

Race condition in Apple macOS

LOW 32

A race condition was addressed with improved locking.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00703 Published 2021-08-24 Fixed in 12.0 CWE-362

TI-2021-11287 CVE-2021-30920

Incorrect permission assignment in Apple macOS

LOW 24

A permissions issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00231 Published 2021-08-24 Fixed in 12.0 CWE-732

TI-2021-11286 CVE-2021-30919

Out-of-bounds write in Apple iOS and iPadOS

LOW 37

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01574 Published 2021-08-24 Fixed in 15.1, 14.8 +4 CWE-787

TI-2021-11284 CVE-2021-30917

Improper input validation in Apple iOS and iPadOS

LOW 37

A memory corruption issue existed in the processing of ICC profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01542 Published 2021-08-24 Fixed in 15.1, 14.8 +4 CWE-20

TI-2021-11283 CVE-2021-30916

Out-of-bounds write in Apple iOS and iPadOS

LOW 37

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01561 Published 2021-08-24 Fixed in 15.1, 14.8 +3 CWE-787

TI-2021-11282 CVE-2021-30915

Apple iOS and iPadOS: A person with physical access to an iOS device may be able to…

LOW 12

A logic issue was addressed with improved state management.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00328 Published 2021-08-24 Fixed in 15.1, 12.0 +3

TI-2021-11280 CVE-2021-30913

Apple macOS: An unprivileged application may be able to edit NVRAM variables

LOW 28

The issue was addressed with improved permissions logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01588 Published 2021-08-24 Fixed in 12.0, 11.6

TI-2021-11279 CVE-2021-30912

Apple macOS: A malicious application may gain access to a user's Keychain items

LOW 28

The issue was addressed with improved permissions logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01587 Published 2021-08-24 Fixed in 12.0, 2021 +1 CWE-281

TI-2021-11278 CVE-2021-30911

Out-of-bounds read in Apple iOS and iPadOS

LOW 26

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00866 Published 2021-08-24 Fixed in 15.1, 12.0 +2 CWE-125

TI-2021-11277 CVE-2021-30910

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01078 Published 2021-08-24 Fixed in 15.1, 12.0 +2 CWE-125

TI-2021-11276 CVE-2021-30909

Out-of-bounds write in Apple iOS and iPadOS

LOW 37

A memory corruption issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01375 Published 2021-08-24 Fixed in 15.1, 14.8 +4 CWE-787

TI-2021-11275 CVE-2021-30908

Apple macOS: A local attacker may be able to view the previous logged-in user’s desktop…

LOW 16

An authentication issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00278 Published 2021-08-24 Fixed in 12.0, 11.6

TI-2021-11274 CVE-2021-30907

Integer overflow in Apple iOS and iPadOS

LOW 36

An integer overflow was addressed through improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00976 Published 2021-08-24 Fixed in 15.1, 14.8 +4 CWE-190

TI-2021-11273 CVE-2021-30906

Apple iOS and iPadOS: A local attacker may be able to elevate their privileges

LOW 34

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00308 Published 2021-08-24 Fixed in 15.1, 12.0 +2

TI-2021-11272 CVE-2021-30905

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01113 Published 2021-08-24 Fixed in 15.1, 12.0 +2 CWE-125

TI-2021-11271 CVE-2021-30904

Apple macOS: A user's messages may continue to sync after the user has signed out of…

LOW 26

A sync issue was addressed with improved state validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00804 Published 2021-08-24 Fixed in 12.0 CWE-662

Vulnerabilities

Filters