CVSS: 5.5EPSS: 0%CPEs: 33EXPL: 0CVE-2021-1739 – Apple Security Advisory 2021-04-26-2
https://notcve.org/view.php?id=CVE-2021-1739
28 Apr 2021 — A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system. Se abordó un problema de análisis en el manejo de las rutas de los directorios con una comprobación de rutas mejorada. Este problema se corrigió en Security Update 2021-002 Catalina, S... • https://support.apple.com/en-us/HT212317 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.8EPSS: 0%CPEs: 34EXPL: 0CVE-2021-1868 – Apple Security Advisory 2021-04-26-2
https://notcve.org/view.php?id=CVE-2021-1868
28 Apr 2021 — A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local attacker may be able to elevate their privileges. Se abordó un problema lógico con una administración de estado mejorada. Este problema se corrigió en Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS versión 14.5 e iPadOS versión 14.5, watchOS versión 7.4, tvO... • https://support.apple.com/en-us/HT212317 • CWE-269: Improper Privilege Management •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2021-1829 – Apple Security Advisory 2021-04-26-2
https://notcve.org/view.php?id=CVE-2021-1829
28 Apr 2021 — A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges. Se abordó un problema de confusión de tipos con una administración de estado mejorada. Este problema se corrigió en macOS Big Sur versión 11.3. • https://support.apple.com/en-us/HT212325 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 10.0EPSS: 0%CPEs: 42EXPL: 0CVE-2021-1834 – Apple macOS AppleIntelKBLGraphics IOCTL 0x30002 Out-Of-Bounds Write Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2021-1834
28 Apr 2021 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to execute arbitrary code with kernel privileges. Se abordó un problema de escritura fuera de límites con una comprobación de límites mejorada . Este problema se corrigió en macOS Big Sur versión 11.3, Security Update 2021-002 Catalina y Security Update 2021-003 Mojave. • https://support.apple.com/en-us/HT212325 • CWE-787: Out-of-bounds Write •
CVSS: 9.3EPSS: 0%CPEs: 3EXPL: 0CVE-2021-1867 – Apple Security Advisory 2021-04-26-2
https://notcve.org/view.php?id=CVE-2021-1867
28 Apr 2021 — An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, macOS Big Sur 11.3. A malicious application may be able to execute arbitrary code with kernel privileges. Se abordó una lectura fuera de límites con una comprobación de entrada mejorada. Este problema se corrigió en iOS versión 14.5 e iPadOS versión 14.5, macOS Big Sur versión 11.3. • https://support.apple.com/en-us/HT212317 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-1814 – Apple macOS ImageIO DDS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-1814
28 Apr 2021 — This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution. Este problema es abordado con comprobaciones mejoradas. Este problema se corrigió en macOS Big Sur versión 11.3, watchOS versión 7.4. • https://support.apple.com/en-us/HT212324 •
CVSS: 5.5EPSS: 57%CPEs: 10EXPL: 2CVE-2021-30657 – Apple macOS Unspecified Vulnerability
https://notcve.org/view.php?id=CVE-2021-30657
28 Apr 2021 — A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited.. Se abordó un problema lógico con una administración de estado mejorada. • https://packetstorm.news/files/id/162504 • CWE-862: Missing Authorization •
CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 0CVE-2021-30661 – Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
https://notcve.org/view.php?id=CVE-2021-30661
28 Apr 2021 — A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.. Se abordó un problema de uso de la memoria previamente liberada con una administración de la memoria mejorada. • https://support.apple.com/en-us/HT212317 • CWE-20: Improper Input Validation CWE-416: Use After Free •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2021-1803
https://notcve.org/view.php?id=CVE-2021-1803
02 Apr 2021 — The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A local application may be able to enumerate the user's iCloud documents. El problema se abordó con una lógica de permisos mejorada. Este problema es corregido en macOS Big Sur versión 11.0.1. • https://support.apple.com/en-us/HT211931 •
CVSS: 2.4EPSS: 0%CPEs: 1EXPL: 0CVE-2021-1755
https://notcve.org/view.php?id=CVE-2021-1755
02 Apr 2021 — A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A person with physical access to an iOS device may be able to access contacts from the lock screen. Un problema de la pantalla de bloqueo permitió el acceso a los contactos en un dispositivo bloqueado. • https://support.apple.com/en-us/HT211931 • CWE-862: Missing Authorization •