Vulnerabilities

TI-2021-11174 CVE-2021-30797 · GHSA-q239-wm45-8mwc

Apple iOS: Processing maliciously crafted web content may lead to code execution

MEDIUM 42

This issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01867 Published 2021-09-08 Partial fix · 14.7, 11.5 +2

TI-2021-11172 CVE-2021-30795 · GHSA-mq98-f72q-hfx8

Use after free in Apple iOS

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02217 Published 2021-09-08 Partial fix · 14.7, 11.5 +2 CWE-416

TI-2021-11167 CVE-2021-30789 · GHSA-4x5p-qcrv-5jj7

Out-of-bounds read in Apple Security Update - Catalina

LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01248 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-125

TI-2021-11163 CVE-2021-30785 · GHSA-8rmr-f55v-w9w6

Buffer overflow in Apple Security Update - Catalina

LOW 38

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01844 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-120

TI-2021-11158 CVE-2021-30780 · GHSA-6mq7-ggq4-5r36

Out-of-bounds write in Apple Security Update - Catalina

LOW 37

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01301 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-787

TI-2021-11159 CVE-2021-30781 · GHSA-4jxj-cpjx-2v7r

Apple Security Update - Catalina: A local attacker may be able to cause unexpected…

LOW 34

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00365 Published 2021-09-08 Fixed in 2021, 14.7 +2

TI-2021-11154 CVE-2021-30776 · GHSA-wg3q-wx58-gfq6

Apple Security Update - Catalina: Playing a malicious audio file may lead to an…

LOW 27

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01004 Published 2021-09-08 Fixed in 2021, 14.7 +2

TI-2021-11157 CVE-2021-30779 · GHSA-9x54-gxfh-qxvm

Apple iOS: Processing a maliciously crafted image may lead to arbitrary code execution

LOW 37

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01293 Published 2021-09-08 Fixed in 14.7, 11.5 +1

TI-2021-11152 CVE-2021-30774 · GHSA-gg35-v4g5-3323

Apple iOS: A malicious application may be able to gain root privileges

LOW 37

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01243 Published 2021-09-08 Fixed in 14.7, 11.5 +1

TI-2021-11153 CVE-2021-30775 · GHSA-fwqw-65p3-5cgj

Out-of-bounds write in Apple Security Update - Catalina

LOW 37

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01222 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-787

TI-2021-11146 CVE-2021-30768 · GHSA-6hrr-25fh-jc7j

Apple Security Update - Catalina: A sandboxed process may be able to circumvent sandbox…

LOW 27

A logic issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01101 Published 2021-09-08 Fixed in 2021, 14.7 +2

TI-2021-11138 CVE-2021-30760 · GHSA-4ccr-c6hg-r7x3

Integer overflow in Apple Security Update - Catalina

LOW 37

An integer overflow was addressed through improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01336 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-190

TI-2021-11136 CVE-2021-30758 · GHSA-7qcx-m2gc-9659

Type confusion in Apple iOS

MEDIUM 41

A type confusion issue was addressed with improved state handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01658 Published 2021-09-08 Partial fix · 14.7, 11.5 +2 CWE-843

TI-2021-11137 CVE-2021-30759 · GHSA-5xrw-9wr4-v4rm

Out-of-bounds write in Apple Security Update - Catalina

LOW 37

A stack overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01518 Published 2021-09-08 Fixed in 2021, 14.7 +2 CWE-787

TI-2021-11166 CVE-2021-30788 · GHSA-5725-9883-g5fp

Apple Security Update - Catalina: Processing a maliciously crafted tiff file may lead to…

LOW 34

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01146 Published 2021-09-08 Fixed in 2021, 14.7 +2

TI-2021-11175 CVE-2021-30798 · GHSA-5vv2-x7qh-g29x

Apple iOS: A malicious application may be able to bypass certain Privacy preferences

LOW 36

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01774 Published 2021-09-08 Fixed in 14.7, 11.5 +1

Vulnerabilities

Filters