Vulnerabilities

TI-2021-01466 CVE-2021-1753 · GHSA-r579-vrrg-xcv8

Out-of-bounds read in Apple iOS and iPadOS

LOW 36

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0092 Published 2021-04-02 Fixed in 14.4, 11.2 CWE-125

TI-2021-01474 CVE-2021-1761 · GHSA-jxf4-w4m5-h6gr

Apple iOS and iPadOS: A remote attacker may be able to cause a denial of service

LOW 37

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02141 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01529 CVE-2021-1818 · GHSA-5r6j-4xvp-4m98

Apple iOS and iPadOS: A remote attacker may be able to cause unexpected application…

MEDIUM 47

A logic issue was addressed with improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02961 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01572 CVE-2021-1870 · GHSA-f8fh-g8mv-p7hh

Apple iOS and iPadOS: A remote attacker may be able to cause arbitrary code execution

CRITICAL 100KEV

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0771 Published 2021-04-02 Partial fix · 14.4, 11.2

TI-2021-01516 CVE-2021-1805 · GHSA-78vv-gpj6-9ffp

Out-of-bounds write in Apple macOS

LOW 36

An out-of-bounds write was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01184 Published 2021-04-02 Fixed in 11.2 CWE-787

TI-2021-01513 CVE-2021-1801 · GHSA-99vx-wqpw-hqrq

Apple iOS and iPadOS: Maliciously crafted web content may violate iframe sandboxing policy

LOW 32

This issue was addressed with improved iframe sandbox enforcement.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01515 Published 2021-04-02 Partial fix · 14.4, 11.2 +1

TI-2021-01517 CVE-2021-1806 · GHSA-6j4c-93q9-wrhq

Race condition in Apple macOS

LOW 33

A race condition was addressed with additional validation.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00934 Published 2021-04-02 Fixed in 11.2 CWE-362

TI-2021-01514 CVE-2021-1802 · GHSA-26rw-7v38-gcgj

Improper privilege management in Apple macOS

LOW 34

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0024 Published 2021-04-02 Fixed in 11.2 CWE-269

TI-2021-01511 CVE-2021-1799 · GHSA-94v4-v74g-2hx6

Apple iOS and iPadOS: A malicious website may be able to access restricted ports on…

LOW 32

A port redirection issue was addressed with additional port validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01763 Published 2021-04-02 Partial fix · 14.4, 11.2 +2

TI-2021-01510 CVE-2021-1797 · GHSA-3973-4x54-vxm4

Apple iOS and iPadOS: A local user may be able to read arbitrary files

LOW 26

The issue was addressed with improved permissions logic.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00865 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01506 CVE-2021-1793 · GHSA-q994-pg88-mhr5

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to arbitrary code…

LOW 36

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00995 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01503 CVE-2021-1790 · GHSA-gp78-mghw-hj7r

Out-of-bounds read in Apple macOS

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01001 Published 2021-04-02 Fixed in 11.2 CWE-125

TI-2021-01504 CVE-2021-1791 · GHSA-3mqc-98m9-f5mm

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read issue existed that led to the disclosure of kernel memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01205 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-125

TI-2021-01502 CVE-2021-1789 · GHSA-c838-pj7m-89q4

Type confusion in Apple iOS and iPadOS

CRITICAL 97KEV

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.13975 Published 2021-04-02 Partial fix · 14.4, 11.2 +2 CWE-843

TI-2021-01505 CVE-2021-1792 · GHSA-5xw9-hx37-rmr4

Out-of-bounds read in Apple iOS and iPadOS

MEDIUM 42

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02016 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-125

TI-2021-01500 CVE-2021-1787 · GHSA-jhrj-5wfp-8cw5

Improper privilege management in Apple iOS and iPadOS

LOW 34

Multiple issues were addressed with improved logic.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00262 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-269

TI-2021-01498 CVE-2021-1785 · GHSA-8mf4-84wh-rhq3

Out-of-bounds read in Apple iOS and iPadOS

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0108 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-125

TI-2021-01496 CVE-2021-1783 · GHSA-5vhv-vwq7-258g

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to arbitrary code…

LOW 36

An access issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0108 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01499 CVE-2021-1786 · GHSA-qm43-34xg-9vr7

Apple iOS and iPadOS: A local user may be able to create or modify system files

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00295 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01495 CVE-2021-1782 · GHSA-22jf-974v-hf7j

Apple iOS and iPadOS: A malicious application may be able to elevate privileges

CRITICAL 90KEV

A race condition was addressed with improved locking.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02222 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-667

TI-2021-01494 CVE-2021-1781 · GHSA-qhv8-7rp5-26v3

A privacy issue existed in the handling of Contact cards.

LOW 26

A privacy issue existed in the handling of Contact cards.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00713 Published 2021-04-02 Fixed in 14.4, 11.2

TI-2021-01490 CVE-2021-1777 · GHSA-hq97-57gj-6388

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to arbitrary code…

LOW 36

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01075 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01491 CVE-2021-1778 · GHSA-7wqq-gwmg-pcrr

Out-of-bounds read in Apple iOS and iPadOS

LOW 26

An out-of-bounds read issue existed in the curl.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00795 Published 2021-04-02 Fixed in 14.4, 11.2 +1 CWE-125

TI-2021-01486 CVE-2021-1773 · GHSA-3rpg-mvgw-33wg

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to a denial of…

LOW 26

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00843 Published 2021-04-02 Fixed in 14.4, 11.2 +1

TI-2021-01492 CVE-2021-1779 · GHSA-ch45-2vcr-mv8w

Apple macOS: An application may be able to execute arbitrary code with system privileges

LOW 37

A logic error in kext loading was addressed with improved state handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01221 Published 2021-04-02 Fixed in 11.2

Vulnerabilities

Filters