Vulnerabilities

TI-2021-11065 CVE-2021-30681 · GHSA-282h-xw4x-7x34

Improper input validation in Apple iOS and iPadOS

LOW 36

A validation issue existed in the handling of symlinks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01028 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-20

TI-2021-11069 CVE-2021-30685 · GHSA-v539-xc59-x573

Apple iOS and iPadOS: Parsing a maliciously crafted audio file may lead to disclosure of…

LOW 26

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00878 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11066 CVE-2021-30682 · GHSA-w85p-6q9m-866x

Apple iOS and iPadOS: A malicious application may be able to leak sensitive user…

LOW 28

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01666 Published 2021-09-08 Partial fix · 14.6, 11.4 +2

TI-2021-11071 CVE-2021-30687 · GHSA-9xqf-qwq5-7qrm

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01181 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-125

TI-2021-11073 CVE-2021-30689 · GHSA-2mm2-42pq-5qmv

Cross-site scripting in Apple iOS and iPadOS

LOW 29

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.011 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-79

TI-2021-11084 CVE-2021-30700 · GHSA-5f6g-pwch-7c2q

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to disclosure of…

LOW 26

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00878 Published 2021-09-08 Fixed in 14.6, 11.4 +1

TI-2021-11098 CVE-2021-30715 · GHSA-frfj-xhqr-qppx

Apple iOS and iPadOS: Processing a maliciously crafted message may lead to a denial of…

LOW 36

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01706 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11081 CVE-2021-30697 · GHSA-xmch-wgh7-x2fj

Apple iOS and iPadOS: A local user may be able to leak sensitive user information

LOW 25

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00297 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11094 CVE-2021-30710 · GHSA-c56p-qjh9-5gqm

Out-of-bounds write in Apple iOS and iPadOS

LOW 33

A memory corruption issue was addressed with improved state management.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00923 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-787

TI-2021-11090 CVE-2021-30706 · GHSA-43r7-fmc5-8629

Out-of-bounds read in Apple iOS and iPadOS

LOW 26

Processing a maliciously crafted image may lead to disclosure of user information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00804 Published 2021-09-08 Fixed in 14.6, 11.4 +1 CWE-125

TI-2021-11089 CVE-2021-30705 · GHSA-x4gw-4hvm-h8g4

Apple iOS and iPadOS: Processing a maliciously crafted ASTC file may disclose memory…

LOW 27

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00904 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11085 CVE-2021-30701 · GHSA-2332-q5x7-f8c3

Apple iOS and iPadOS: Processing a maliciously crafted image may lead to arbitrary code…

LOW 36

This issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01142 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11091 CVE-2021-30707 · GHSA-5xgj-4p79-5g3g

Buffer overflow in Apple iOS and iPadOS

MEDIUM 42

This issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01861 Published 2021-09-08 Fixed in 14.6, 11.4 +1 CWE-120

TI-2021-11070 CVE-2021-30686 · GHSA-vq7r-vh3j-w5g9

Out-of-bounds read in Apple iOS and iPadOS

LOW 26

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00864 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-125

TI-2021-11088 CVE-2021-30704 · GHSA-mjrv-5v4q-78q6

Apple iOS and iPadOS: An application may be able to execute arbitrary code with kernel…

LOW 34

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00365 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11087 CVE-2021-30703 · GHSA-cxxw-rfqc-pqx7

Double free in Apple iOS and iPadOS

LOW 34

A double free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00332 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-415

TI-2021-11061 CVE-2021-30677 · GHSA-g3g5-fx3c-q38p

Apple iOS and iPadOS: A malicious application may be able to break out of its sandbox

LOW 38

This issue was addressed with improved environment sanitization.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00349 Published 2021-09-08 Fixed in 14.6, 11.4 +2

TI-2021-11133 CVE-2021-30755 · GHSA-gwjf-hjm7-xvq3

Out-of-bounds read in Apple macOS

LOW 32

Processing a maliciously crafted font may result in the disclosure of process memory.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01331 Published 2021-09-08 Fixed in 11.4, 14.6 +1 CWE-125

TI-2021-11132 CVE-2021-30753 · GHSA-248r-f975-ppfj

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

Processing a maliciously crafted font may result in the disclosure of process memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00911 Published 2021-09-08 Fixed in 14.6, 11.4 +1 CWE-125

TI-2021-11128 CVE-2021-30749 · GHSA-7477-545w-5xj3

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 41

Multiple memory corruption issues were addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01677 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-787

TI-2021-11125 CVE-2021-30744 · GHSA-6gqw-9w99-v9gq

Cross-site scripting in Apple iOS and iPadOS

LOW 30

Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01155 Published 2021-09-08 Partial fix · 14.6, 11.4 +2 CWE-79

TI-2021-11121 CVE-2021-30740 · GHSA-267j-fv8q-8h8j

Apple iOS and iPadOS: A malicious application may be able to execute arbitrary code with…

LOW 37

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01462 Published 2021-09-08 Fixed in 14.6, 11.4 +1

TI-2021-11118 CVE-2021-30737 · GHSA-f7gv-428c-w364

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 41

A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01493 Published 2021-09-08 Fixed in 14.6, 11.4 +3 CWE-787

TI-2021-11114 CVE-2021-30733 · GHSA-jf77-8jp8-mmmm

Out-of-bounds read in Apple iOS and iPadOS

LOW 27

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00995 Published 2021-09-08 Fixed in 14.6, 11.4 +2 CWE-125

TI-2021-11117 CVE-2021-30736 · GHSA-765w-cqpp-rq2q

Buffer overflow in Apple iOS and iPadOS

LOW 37

A buffer overflow was addressed with improved size validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0162 Published 2021-09-08 Fixed in 14.6, 11.4 +1 CWE-120

Vulnerabilities

Filters