Vulnerabilities

TI-2021-01497 CVE-2021-1784 · GHSA-mh4j-qch9-f5wf

A permissions issue existed in DiskArbitration.

LOW 37

A permissions issue existed in DiskArbitration.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02263 Published 2021-09-08 Fixed in 11.3, 2021

TI-2021-01520 CVE-2021-1809 · GHSA-2wwm-h8xc-j39r

Out-of-bounds write in Apple iOS and iPadOS

LOW 36

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01768 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787

TI-2021-01533 CVE-2021-1824 · GHSA-8hm9-jrgc-pmmv

Apple macOS: A malicious application with root privileges may be able to access private…

LOW 20

This issue was addressed with improved entitlements.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00305 Published 2021-09-08 Fixed in 11.3, 2021

TI-2021-01455 CVE-2021-1740 · GHSA-9hc5-m4g5-3m3c

Path traversal in Apple iOS and iPadOS

LOW 27

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01044 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-22

TI-2021-01536 CVE-2021-1828 · GHSA-h9qq-297c-38mx

Out-of-bounds write in Apple macOS

LOW 33

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01008 Published 2021-09-08 Fixed in 11.3, 2021 CWE-787

TI-2021-01522 CVE-2021-1811 · GHSA-r399-j3c6-85hw

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01673 Published 2021-09-08 Fixed in 14.5, 12.11 +4

TI-2021-01521 CVE-2021-1810 · GHSA-pg5g-hrxm-397x

Apple macOS: A malicious application may bypass Gatekeeper checks

LOW 27

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01237 Published 2021-09-08 Fixed in 11.3, 2021

TI-2021-01524 CVE-2021-1813 · GHSA-2f3m-7p38-8gpp

Improper privilege management in Apple iOS and iPadOS

LOW 36

A validation issue was addressed with improved logic.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01106 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-269

TI-2021-01519 CVE-2021-1808 · GHSA-4xx2-x648-8hgc

Out-of-bounds write in Apple iOS and iPadOS

LOW 36

A memory corruption issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01746 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787

TI-2021-01454 CVE-2021-1739 · GHSA-5x9g-fm6c-gp28

Path traversal in Apple iOS and iPadOS

LOW 25

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00367 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-22

TI-2021-11042 CVE-2021-30657 · GHSA-4f6h-9vp6-5p6r

Missing authorization in Apple macOS

HIGH 82KEV

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.68531 Published 2021-09-08 Fixed in 11.3, 2021 CWE-862

TI-2021-01578 CVE-2021-1876 · GHSA-3363-c452-8hxm

Use after free in Apple macOS

MEDIUM 41

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01258 Published 2021-09-08 Fixed in 11.3, 2021 CWE-416

TI-2021-01577 CVE-2021-1875 · GHSA-hfh7-m9jr-j829

Double free in Apple iOS and iPadOS

LOW 36

A double free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00911 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-415

TI-2021-01571 CVE-2021-1868 · GHSA-h4cc-27hc-fw7g

Improper privilege management in Apple iOS and iPadOS

LOW 34

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00267 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-269

TI-2021-01585 CVE-2021-1883 · GHSA-vq82-pf9c-33h9

Out-of-bounds write in Apple iOS and iPadOS

LOW 29

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01999 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787

TI-2021-01586 CVE-2021-1884 · GHSA-2v79-m39q-gmxx

Race condition in Apple iOS and iPadOS

LOW 30

A race condition was addressed with improved locking.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01624 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-362

TI-2021-11037 CVE-2021-30652 · GHSA-4cmm-h58v-xqp3

Race condition in Apple iOS and iPadOS

LOW 32

A race condition was addressed with additional validation.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00824 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-362

TI-2021-01584 CVE-2021-1882 · GHSA-wjj4-8gg2-x22g

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 45

A memory corruption issue was addressed with improved validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01692 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787

TI-2021-01583 CVE-2021-1881 · GHSA-m2m5-p4p4-3w6r

Out-of-bounds read in Apple iOS and iPadOS

LOW 37

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01421 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-125

TI-2021-11040 CVE-2021-30655 · GHSA-4wxr-8w46-674r

An application may be able to execute arbitrary code with system privileges.

MEDIUM 46

An application may be able to execute arbitrary code with system privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02289 Published 2021-09-08 Fixed in 11.3, 2021

TI-2021-01580 CVE-2021-1878 · GHSA-9h5x-7fqr-xqgx

Integer overflow in Apple macOS

LOW 32

An integer overflow was addressed with improved input validation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01825 Published 2021-09-08 Fixed in 11.3, 2021 CWE-190

TI-2021-01575 CVE-2021-1873 · GHSA-5fv4-524x-62xf

Apple macOS: A malicious application may be able to unexpectedly leak a user's…

LOW 31

An API issue in Accessibility TCC permissions was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01245 Published 2021-09-08 Fixed in 11.3, 2021

TI-2021-01564 CVE-2021-1860 · GHSA-3vxw-2q8f-4h9h

Apple iOS and iPadOS: A malicious application may be able to disclose kernel memory

LOW 32

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01521 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-665

TI-2021-01562 CVE-2021-1858 · GHSA-973q-jf8v-6q77

Out-of-bounds write in Apple iOS and iPadOS

LOW 36

Processing a maliciously crafted image may lead to arbitrary code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01142 Published 2021-09-08 Fixed in 14.5, 7.4 +2 CWE-787

TI-2021-01561 CVE-2021-1857 · GHSA-gr6c-576g-h3q2

Apple iOS and iPadOS: Processing maliciously crafted web content may disclose sensitive…

LOW 31

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01224 Published 2021-09-08 Fixed in 14.5, 12.11 +4 CWE-665

Vulnerabilities

Filters