Vulnerabilities

TI-2021-01466 CVE-2021-1753 · GHSA-r579-vrrg-xcv8

Out-of-bounds read in Apple iOS and iPadOS

LOW 36

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0092 Published 2021-04-02 Fixed in 14.4, 11.2 CWE-125

TI-2021-01474 CVE-2021-1761 · GHSA-jxf4-w4m5-h6gr

Apple iOS and iPadOS: A remote attacker may be able to cause a denial of service

LOW 37

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02141 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01529 CVE-2021-1818 · GHSA-5r6j-4xvp-4m98

Apple iOS and iPadOS: A remote attacker may be able to cause unexpected application…

MEDIUM 47

A logic issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02961 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01581 CVE-2021-1879 · GHSA-qhqp-qw35-f96r

Cross-site scripting in Apple iOS and iPadOS

HIGH 84KEV

This issue was addressed by improved management of object lifetimes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.07082 Published 2021-04-02 Fixed in 14.4, 12.5 +1 CWE-79

TI-2021-01572 CVE-2021-1870 · GHSA-f8fh-g8mv-p7hh

Apple iOS and iPadOS: A remote attacker may be able to cause arbitrary code execution

CRITICAL 100KEV

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0771 Published 2021-04-02 Partial fix · 14.4, 11.2

TI-2021-01513 CVE-2021-1801 · GHSA-99vx-wqpw-hqrq

Apple iOS and iPadOS: Maliciously crafted web content may violate iframe sandboxing policy

LOW 32

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01515 Published 2021-04-02 Partial fix · 14.4, 11.2 +1

TI-2021-01511 CVE-2021-1799 · GHSA-94v4-v74g-2hx6

Apple iOS and iPadOS: A malicious website may be able to access restricted ports on…

LOW 32

A port redirection issue was addressed with additional port validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01763 Published 2021-04-02 Partial fix · 14.4, 11.2 +2

TI-2021-01510 CVE-2021-1797 · GHSA-3973-4x54-vxm4

Apple iOS and iPadOS: A local user may be able to read arbitrary files

LOW 26

The issue was addressed with improved permissions logic.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00865 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01509 CVE-2021-1796 · GHSA-w4j9-v938-v84v

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 46

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02041 Published 2021-04-02 Fixed in 14.4 CWE-787

TI-2021-01506 CVE-2021-1793 · GHSA-q994-pg88-mhr5

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to arbitrary code…

LOW 36

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00995 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01508 CVE-2021-1795 · GHSA-v5x6-8pjw-w5x5

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 46

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02165 Published 2021-04-02 Fixed in 14.4 CWE-787

TI-2021-01507 CVE-2021-1794 · GHSA-v24v-2rw9-j2g5

Out-of-bounds read in Apple iOS and iPadOS

MEDIUM 46

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02226 Published 2021-04-02 Fixed in 14.4 CWE-125

TI-2021-01504 CVE-2021-1791 · GHSA-3mqc-98m9-f5mm

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read issue existed that led to the disclosure of kernel memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01205 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-125

TI-2021-01502 CVE-2021-1789 · GHSA-c838-pj7m-89q4

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13975 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-843

TI-2021-01505 CVE-2021-1792 · GHSA-5xw9-hx37-rmr4

Out-of-bounds read in Apple iOS and iPadOS

MEDIUM 42

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02016 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-125

TI-2021-01500 CVE-2021-1787 · GHSA-jhrj-5wfp-8cw5

Improper privilege management in Apple iOS and iPadOS

LOW 34

Multiple issues were addressed with improved logic.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00262 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-269

TI-2021-01498 CVE-2021-1785 · GHSA-8mf4-84wh-rhq3

Out-of-bounds read in Apple iOS and iPadOS

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0108 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-125

TI-2021-01496 CVE-2021-1783 · GHSA-5vhv-vwq7-258g

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to arbitrary code…

LOW 36

An access issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0108 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01499 CVE-2021-1786 · GHSA-qm43-34xg-9vr7

Apple iOS and iPadOS: A local user may be able to create or modify system files

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00295 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01495 CVE-2021-1782 · GHSA-22jf-974v-hf7j

Apple iOS and iPadOS: A malicious application may be able to elevate privileges

CRITICAL 90KEV

A race condition was addressed with improved locking.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02222 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-667

TI-2021-01494 CVE-2021-1781 · GHSA-qhv8-7rp5-26v3

A privacy issue existed in the handling of Contact cards.

LOW 26

A privacy issue existed in the handling of Contact cards.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00713 Published 2021-04-02 Fixed in 14.4, 11.2

TI-2021-01490 CVE-2021-1777 · GHSA-hq97-57gj-6388

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to arbitrary code…

LOW 36

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01075 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01491 CVE-2021-1778 · GHSA-7wqq-gwmg-pcrr

Out-of-bounds read in Apple iOS and iPadOS

LOW 26

An out-of-bounds read issue existed in the curl.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00795 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-125

TI-2021-01493 CVE-2021-1780 · GHSA-47jr-g6q2-jxrq

Apple iOS and iPadOS: An attacker in a privileged position may be able to perform a…

LOW 20

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00259 Published 2021-04-02 Fixed in 14.4 CWE-665

TI-2021-01486 CVE-2021-1773 · GHSA-3rpg-mvgw-33wg

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to a denial of…

LOW 26

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00843 Published 2021-04-02 Fixed in 14.4, 11.2 +1

Vulnerabilities

Filters