Vulnerabilities

TI-2021-11064 CVE-2021-30680 · GHSA-cj86-fx72-rxqx

Apple macOS: A local user may be able to load unsigned kernel extensions

LOW 34

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00309 Published 2021-09-08 Fixed in 11.4

TI-2021-11102 CVE-2021-30719 · GHSA-956q-7m23-phjx

Out-of-bounds read in Apple macOS

LOW 31

A local user may be able to cause unexpected system termination or read kernel memory.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00279 Published 2021-09-08 Fixed in 11.4, 2021 CWE-125

TI-2021-11068 CVE-2021-30684 · GHSA-pw42-594r-f3xh

Apple macOS: A remote attacker may cause an unexpected application termination or…

LOW 37

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01455 Published 2021-09-08 Fixed in 11.4, 2021

TI-2021-11063 CVE-2021-30679 · GHSA-76cf-2jrp-mj4m

Apple macOS: An application may be able to gain elevated privileges

LOW 36

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00817 Published 2021-09-08 Fixed in 11.4, 2021

TI-2021-11065 CVE-2021-30681 · GHSA-282h-xw4x-7x34

Improper input validation in Apple iOS and iPadOS

LOW 36

A validation issue existed in the handling of symlinks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01028 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-20

TI-2021-11069 CVE-2021-30685 · GHSA-v539-xc59-x573

Apple iOS and iPadOS: Parsing a maliciously crafted audio file may lead to disclosure of…

LOW 26

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00878 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11066 CVE-2021-30682 · GHSA-w85p-6q9m-866x

Apple iOS and iPadOS: A malicious application may be able to leak sensitive user…

LOW 28

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01666 Published 2021-09-08 Partial fix · 14.6, 11.4 +2

TI-2021-11071 CVE-2021-30687 · GHSA-9xqf-qwq5-7qrm

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01181 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-125

TI-2021-11095 CVE-2021-30712 · GHSA-6qh5-cp9g-4x2r

Apple macOS: A remote attacker may be able to cause unexpected application termination or…

MEDIUM 41

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03766 Published 2021-09-08 Fixed in 11.4, 2021

TI-2021-11073 CVE-2021-30689 · GHSA-2mm2-42pq-5qmv

Cross-site scripting in Apple iOS and iPadOS

LOW 29

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.011 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-79

TI-2021-11086 CVE-2021-30702 · GHSA-qq7x-7h3g-gmhc

Improper authentication in Apple macOS

LOW 21

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00298 Published 2021-09-08 Fixed in 11.4, 2021 CWE-287

TI-2021-11099 CVE-2021-30716 · GHSA-f6j8-h69q-85jh

Apple macOS: An attacker in a privileged network position may be able to perform denial…

LOW 30

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01623 Published 2021-09-08 Fixed in 11.4, 2021

TI-2021-11077 CVE-2021-30693 · GHSA-qf9p-x7hr-4hw3

Improper input validation in Apple iOS and iPadOS

LOW 36

A validation issue was addressed with improved logic.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01168 Published 2021-09-08 Fixed in 14.6, 11.4 +1 CWE-20

TI-2021-11093 CVE-2021-30709 · GHSA-xpcw-3w24-57xc

Apple iOS and iPadOS: Processing a maliciously crafted USD file may disclose memory…

LOW 27

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.009 Published 2021-09-08 Fixed in 14.6, 11.4 +1

TI-2021-11096 CVE-2021-30713 · GHSA-x3vf-fcq8-6cpg

Missing authorization in Apple macOS

CRITICAL 93KEV

A permissions issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07038 Published 2021-09-08 Fixed in 11.4 CWE-862

TI-2021-11078 CVE-2021-30694 · GHSA-p89h-86gx-x9fw

Apple iOS and iPadOS: Processing a maliciously crafted USD file may disclose memory…

LOW 27

An information disclosure issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00952 Published 2021-09-08 Fixed in 14.6, 11.4 +1

TI-2021-11084 CVE-2021-30700 · GHSA-5f6g-pwch-7c2q

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to disclosure of…

LOW 26

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00878 Published 2021-09-08 Fixed in 14.6, 11.4 +1

TI-2021-11092 CVE-2021-30708 · GHSA-8c6r-qv58-w6fw

Out-of-bounds read in Apple iOS and iPadOS

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01139 Published 2021-09-08 Fixed in 14.6, 11.4 +1 CWE-125

TI-2021-11079 CVE-2021-30695 · GHSA-rmr6-xh33-9hqc

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00935 Published 2021-09-08 Fixed in 14.6, 11.4 +1 CWE-125

TI-2021-11098 CVE-2021-30715 · GHSA-frfj-xhqr-qppx

Apple iOS and iPadOS: Processing a maliciously crafted message may lead to a denial of…

LOW 36

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01706 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11072 CVE-2021-30688 · GHSA-jxfj-33w4-r4w4

A malicious application may be able to break out of its sandbox.

LOW 38

A malicious application may be able to break out of its sandbox.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00291 Published 2021-09-08 Fixed in 11.4, 2021

TI-2021-11081 CVE-2021-30697 · GHSA-xmch-wgh7-x2fj

Apple iOS and iPadOS: A local user may be able to leak sensitive user information

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00297 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11094 CVE-2021-30710 · GHSA-c56p-qjh9-5gqm

Out-of-bounds write in Apple iOS and iPadOS

LOW 33

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00923 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-787

TI-2021-11067 CVE-2021-30683 · GHSA-j934-v699-c5q8

Use after free in Apple macOS

LOW 36

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00997 Published 2021-09-08 Fixed in 11.4, 2021 CWE-416

TI-2021-11082 CVE-2021-30698 · GHSA-mcw3-qqp9-m3r9

NULL pointer dereference in Apple iOS and iPadOS

LOW 37

A null pointer dereference was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02182 Published 2021-09-08 Fixed in 14.6, 11.4 +1 CWE-476

Vulnerabilities

Filters