Vulnerabilities

TI-2021-11371 CVE-2021-31008

Type confusion in Apple iOS and iPadOS

MEDIUM 41

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01286 Published 2021-08-24 Fixed in 15, 12.0 +2 CWE-843

TI-2021-11368 CVE-2021-31005

Apple iOS and iPadOS: Turning off "Block all remote content" may not apply to all remote…

LOW 35

Description: A logic issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00896 Published 2021-08-24 Fixed in 15, 12.0

TI-2021-11365 CVE-2021-31001

Apple iOS and iPadOS: An attacker in a privileged network position may be able to leak…

LOW 30

An access issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00818 Published 2021-08-24 Fixed in 15

TI-2021-11265 CVE-2021-30898

Apple iOS and iPadOS: A malicious application may be able to access some of the user's…

LOW 24

An access issue was addressed with additional sandbox restrictions on third party applications.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00246 Published 2021-08-24 Fixed in 15

TI-2021-11254 CVE-2021-30884

The issue was resolved with additional restrictions on CSS compositing.

LOW 24

The issue was resolved with additional restrictions on CSS compositing.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0115 Published 2021-08-24 Partial fix · 15, 8

TI-2021-11252 CVE-2021-30882

Apple iOS and iPadOS: An application with microphone permission may unexpectedly access…

LOW 35

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00977 Published 2021-08-24 Fixed in 15, 8

TI-2021-11245 CVE-2021-30874

Missing authorization in Apple iOS and iPadOS

LOW 35

An authorization issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00926 Published 2021-08-24 Fixed in 15 CWE-862

TI-2021-11242 CVE-2021-30870

A logic issue existed in the handling of document loads.

LOW 30

A logic issue existed in the handling of document loads.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00855 Published 2021-08-24 Fixed in 15

TI-2021-11239 CVE-2021-30867

Improper authentication in Apple iOS and iPadOS

LOW 26

The issue was addressed with improved authentication.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00731 Published 2021-08-24 Fixed in 15 CWE-287

TI-2021-11238 CVE-2021-30866

Apple iOS and iPadOS: A device may be passively tracked by its WiFi MAC address

LOW 29

A user privacy issue was addressed by removing the broadcast MAC address.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00524 Published 2021-08-24 Fixed in 15, 8

TI-2021-11235 CVE-2021-30863

Apple iOS and iPadOS: A 3D model constructed to look like the enrolled user may be able…

LOW 30

This issue was addressed by improving Face ID anti-spoofing models.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0027 Published 2021-08-24 Fixed in 15

TI-2021-11226 CVE-2021-30854

Apple iOS and iPadOS: A sandboxed process may be able to circumvent sandbox restrictions

MEDIUM 40

A logic issue was addressed with improved state management.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0127 Published 2021-08-24 Fixed in 15, 8

TI-2021-11224 CVE-2021-30852

Type confusion in Apple iOS and iPadOS

MEDIUM 41

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01406 Published 2021-08-24 Fixed in 14.8, 15 +1 CWE-843

TI-2021-11223 CVE-2021-30851

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 43

A memory corruption vulnerability was addressed with improved locking.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02394 Published 2021-08-24 Partial fix · 15, 8 CWE-787

Vulnerabilities

Filters