CVSS: 5.5EPSS: 0%CPEs: 21EXPL: 0CVE-2021-30738 – Apple Security Advisory 2021-05-25-2
https://notcve.org/view.php?id=CVE-2021-30738
26 May 2021 — A malicious application may be able to overwrite arbitrary files. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Mojave. An issue with path validation logic for hardlinks was addressed with improved path sanitization. Una aplicación maliciosa puede ser capaz de sobrescribir archivos arbitrarios. Este problema se corrigió en macOS Big Sur versión 11.4, Security Update 2021-004 Mojave. • https://support.apple.com/en-us/HT212529 •
CVSS: 5.5EPSS: 0%CPEs: 30EXPL: 0CVE-2021-30669 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2021-30669
26 May 2021 — A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application may bypass Gatekeeper checks. Se abordó un problema lógico con una administración de estado mejorada. Este problema es corregido en macOS Big Sur versión 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. • https://support.apple.com/en-us/HT212529 • CWE-494: Download of Code Without Integrity Check •
CVSS: 7.8EPSS: 0%CPEs: 32EXPL: 0CVE-2021-30693 – Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-30693
26 May 2021 — A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted image may lead to arbitrary code execution. Se abordó un problema de comprobación con una lógica mejorada. Este problema es corregido en macOS Big Sur versión 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS versión 14.6 y iPadOS versión 14.6. • https://support.apple.com/en-us/HT212528 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 30EXPL: 0CVE-2021-30679 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2021-30679
26 May 2021 — This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An application may be able to gain elevated privileges. Se abordó este problema al eliminar el código vulnerable. Este problema es corregido en macOS Big Sur versión 11.4, Security Update 2021-003 Catalina y Security Update 2021-004 Mojave. • https://support.apple.com/en-us/HT212529 •
CVSS: 7.8EPSS: 0%CPEs: 30EXPL: 0CVE-2021-30739 – Apple Security Advisory 2021-05-25-2
https://notcve.org/view.php?id=CVE-2021-30739
26 May 2021 — A local attacker may be able to elevate their privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A memory corruption issue was addressed with improved validation. Un atacante local puede ser capaz de elevar sus privilegios. Este problema se corrigió en macOS Big Sur versión 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. • https://support.apple.com/en-us/HT212529 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 32EXPL: 0CVE-2021-30725 – Apple macOS ModelIO USD Parsing Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-30725
26 May 2021 — A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution. Se abordó un problema de corrupción de la memoria con una administración de estado mejorada. Este problema se corrigió en macOS Big Sur versión 11.4, Security Update 2021-003 Catalina, ... • https://support.apple.com/en-us/HT212528 • CWE-787: Out-of-bounds Write •
CVSS: 5.9EPSS: 0%CPEs: 30EXPL: 0CVE-2021-30696 – Apple Security Advisory 2021-05-25-2
https://notcve.org/view.php?id=CVE-2021-30696
26 May 2021 — An attacker in a privileged network position may be able to misrepresent application state. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A logic issue was addressed with improved state management. Un atacante en una posición privilegiada en la red puede ser capaz de tergiversar el estado de la aplicación. Este problema es corregido en macOS Big Sur versión 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. • https://support.apple.com/en-us/HT212529 •
CVSS: 4.6EPSS: 0%CPEs: 30EXPL: 0CVE-2021-30702 – Apple Security Advisory 2021-05-25-4
https://notcve.org/view.php?id=CVE-2021-30702
26 May 2021 — A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A person with physical access to a Mac may be able to bypass Login Window. Se abordó un problema lógico con una administración de estado mejorada. Este problema es corregido en macOS Big Sur versión 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. • https://support.apple.com/en-us/HT212529 • CWE-287: Improper Authentication •
CVSS: 5.5EPSS: 0%CPEs: 32EXPL: 0CVE-2021-30709 – Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-30709
26 May 2021 — This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents. Se abordó este problema con comprobaciones mejoradas. Este problema es corregido en macOS Big Sur versión 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS versión 14.6 y iPadOS versión 14.6. • https://support.apple.com/en-us/HT212528 •
CVSS: 8.8EPSS: 0%CPEs: 37EXPL: 0CVE-2021-30737 – Apple Security Advisory 2021-05-25-1
https://notcve.org/view.php?id=CVE-2021-30737
26 May 2021 — A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, iOS 12.5.4, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted certificate may lead to arbitrary code execution. Se abordó un problema de corrupción de la memoria en el descodificador ASN.1 mediante la eliminación del código vulnerable. Este problema se corrigió en tvOS vers... • https://support.apple.com/en-us/HT212528 • CWE-787: Out-of-bounds Write •