Vulnerabilities

TI-2021-11174 CVE-2021-30797 · GHSA-q239-wm45-8mwc

Apple iOS: Processing maliciously crafted web content may lead to code execution

MEDIUM 42

This issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01867 Published 2021-09-08 Partial fix · 14.7, 11.5 +2

TI-2021-11172 CVE-2021-30795 · GHSA-mq98-f72q-hfx8

Use after free in Apple iOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02217 Published 2021-09-08 Partial fix · 14.7, 11.5 +2 CWE-416

TI-2021-11180 CVE-2021-30804 · GHSA-8pfj-wqp7-7x2c

Apple iOS: A malicious application may be able to access Find My data

LOW 17

A permissions issue was addressed with improved validation.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00745 Published 2021-09-08 Fixed in 14.7

TI-2021-11169 CVE-2021-30791 · GHSA-c5r6-553p-7qm8

Out-of-bounds read in Apple iOS

LOW 27

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01116 Published 2021-09-08 Fixed in 14.7, 11.5 CWE-125

TI-2021-11167 CVE-2021-30789 · GHSA-4x5p-qcrv-5jj7

Out-of-bounds read in Apple Security Update - Catalina

LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01248 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-125

TI-2021-11170 CVE-2021-30792 · GHSA-pjr8-522j-xrv6

Out-of-bounds write in Apple iOS

LOW 37

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01291 Published 2021-09-08 Fixed in 14.7, 11.5 CWE-787

TI-2021-11178 CVE-2021-30802 · GHSA-c9vc-847w-w9p5

Use after free in Apple iOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01328 Published 2021-09-08 Fixed in 14.7 CWE-416

TI-2021-11164 CVE-2021-30786 · GHSA-mhx2-29jj-rxfr

Race condition in Apple iOS

LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00791 Published 2021-09-08 Fixed in 14.7, 11.5 CWE-362

TI-2021-11163 CVE-2021-30785 · GHSA-8rmr-f55v-w9w6

Buffer overflow in Apple Security Update - Catalina

LOW 38

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01844 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-120

TI-2021-11158 CVE-2021-30780 · GHSA-6mq7-ggq4-5r36

Out-of-bounds write in Apple Security Update - Catalina

LOW 37

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01301 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-787

TI-2021-11159 CVE-2021-30781 · GHSA-4jxj-cpjx-2v7r

Apple Security Update - Catalina: A local attacker may be able to cause unexpected…

LOW 34

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00365 Published 2021-09-08 Fixed in 2021, 14.7 +2

TI-2021-11154 CVE-2021-30776 · GHSA-wg3q-wx58-gfq6

Apple Security Update - Catalina: Playing a malicious audio file may lead to an…

LOW 27

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01004 Published 2021-09-08 Fixed in 2021, 14.7 +2

TI-2021-11157 CVE-2021-30779 · GHSA-9x54-gxfh-qxvm

Apple iOS: Processing a maliciously crafted image may lead to arbitrary code execution

LOW 37

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01293 Published 2021-09-08 Fixed in 14.7, 11.5 +1

TI-2021-11151 CVE-2021-30773 · GHSA-4gh4-8h8x-f2p8

Apple iOS: A malicious application may be able to bypass code signing checks

LOW 27

An issue in code signature validation was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01142 Published 2021-09-08 Fixed in 14.7, 7.6

TI-2021-11152 CVE-2021-30774 · GHSA-gg35-v4g5-3323

Apple iOS: A malicious application may be able to gain root privileges

LOW 37

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01243 Published 2021-09-08 Fixed in 14.7, 11.5 +1

TI-2021-11147 CVE-2021-30769 · GHSA-ggcc-jfxp-hxph

Improper authentication in Apple iOS

LOW 27

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01112 Published 2021-09-08 Fixed in 14.7, 7.6 CWE-287

TI-2021-11153 CVE-2021-30775 · GHSA-fwqw-65p3-5cgj

Out-of-bounds write in Apple Security Update - Catalina

LOW 37

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01222 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-787

TI-2021-11148 CVE-2021-30770 · GHSA-qw3m-7664-26j4

Improper authentication in Apple iOS

LOW 25

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00381 Published 2021-09-08 Fixed in 14.7, 7.6 CWE-287

TI-2021-11146 CVE-2021-30768 · GHSA-6hrr-25fh-jc7j

Apple Security Update - Catalina: A sandboxed process may be able to circumvent sandbox…

LOW 27

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01101 Published 2021-09-08 Fixed in 2021, 14.7 +2

TI-2021-11138 CVE-2021-30760 · GHSA-4ccr-c6hg-r7x3

Integer overflow in Apple Security Update - Catalina

LOW 37

An integer overflow was addressed through improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01336 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-190

TI-2021-11141 CVE-2021-30763 · GHSA-hhhm-592j-2r47

Improper input validation in Apple iOS

LOW 26

An input validation issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0083 Published 2021-09-08 Fixed in 14.7, 7.6 CWE-20

TI-2021-11136 CVE-2021-30758 · GHSA-7qcx-m2gc-9659

Type confusion in Apple iOS

MEDIUM 41

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01658 Published 2021-09-08 Partial fix · 14.7, 11.5 +2 CWE-843

TI-2021-11137 CVE-2021-30759 · GHSA-5xrw-9wr4-v4rm

Out-of-bounds write in Apple Security Update - Catalina

LOW 37

A stack overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01518 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-787

TI-2021-11127 CVE-2021-30748 · GHSA-v33h-cmh6-v795

Out-of-bounds write in Apple iOS

LOW 37

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01351 Published 2021-09-08 Fixed in 14.7, 11.5 CWE-787

TI-2021-11166 CVE-2021-30788 · GHSA-5725-9883-g5fp

Apple Security Update - Catalina: Processing a maliciously crafted tiff file may lead to…

LOW 34

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01146 Published 2021-09-08 Fixed in 2021, 14.7 +2

Vulnerabilities

Filters