CVSS: 7.5EPSS: 0%CPEs: 22EXPL: 0CVE-2021-31010 – Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2021-31010
24 Aug 2021 — A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release.. Se ha solucionado un problema de deserialización mediante una validación mejorada. • https://support.apple.com/en-us/HT212804 • CWE-502: Deserialization of Untrusted Data •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-31009
https://notcve.org/view.php?id=CVE-2021-31009
24 Aug 2021 — Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS Monterey 12.1. Multiple issues in HDF5. Se han solucionado múltiples problemas al eliminar HDF5. Este problema se ha solucionado en iOS 15.2 y iPadOS 15.2, macOS Monterey 12.1. • https://support.apple.com/en-us/HT212976 •
CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0CVE-2021-31008
https://notcve.org/view.php?id=CVE-2021-31008
24 Aug 2021 — A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 15.1, tvOS 15.1, iOS 15 and iPadOS 15, macOS Monterey 12.0.1, watchOS 8.1. Processing maliciously crafted web content may lead to code execution. Se ha solucionado un problema de confusión de tipos con un mejor manejo de la memoria. Este problema se ha solucionado en Safari 15.1, tvOS 15.1, iOS 15 y iPadOS 15, macOS Monterey 12.0.1, watchOS 8.1. • https://support.apple.com/en-us/HT212814 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2021-31007
https://notcve.org/view.php?id=CVE-2021-31007
24 Aug 2021 — Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Privacy preferences. Descripción: Se ha solucionado un problema de permisos con una validación mejorada. Este problema se ha solucionado en iOS 15.1 y iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. • https://support.apple.com/en-us/HT212867 • CWE-276: Incorrect Default Permissions •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2021-31005
https://notcve.org/view.php?id=CVE-2021-31005
24 Aug 2021 — Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, macOS Monterey 12.0.1. Turning off "Block all remote content" may not apply to all remote content types. Descripción: Se ha solucionado un problema de lógica con la mejora de la gestión de estados. Este problema se ha solucionado en iOS 15 y iPadOS 15, macOS Monterey 12.0.1. • https://support.apple.com/en-us/HT212814 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-31001
https://notcve.org/view.php?id=CVE-2021-31001
24 Aug 2021 — An access issue was addressed with improved access restrictions. This issue is fixed in iOS 15 and iPadOS 15. An attacker in a privileged network position may be able to leak sensitive user information. Se ha solucionado un problema de permisos con una validación mejorada. Este problema se ha solucionado en iOS 15.2 y iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. • https://support.apple.com/en-us/HT212814 •
CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2021-31000
https://notcve.org/view.php?id=CVE-2021-31000
24 Aug 2021 — A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious application may be able to read sensitive contact information. Se ha solucionado un problema de permisos con una validación mejorada. Este problema se ha solucionado en iOS 15.2 y iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. • https://support.apple.com/en-us/HT212975 • CWE-276: Incorrect Default Permissions •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30999
https://notcve.org/view.php?id=CVE-2021-30999
24 Aug 2021 — The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be unable to fully delete browsing history. El problema se ha solucionado con una lógica de permisos mejorada. Este problema se ha solucionado en iOS 14.6 y iPadOS 14.6. • https://support.apple.com/en-us/HT212528 • CWE-276: Incorrect Default Permissions •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30998
https://notcve.org/view.php?id=CVE-2021-30998
24 Aug 2021 — A S/MIME issue existed in the handling of encrypted email. This issue was addressed with improved selection of the encryption certificate. This issue is fixed in iOS 15.2 and iPadOS 15.2. A sender's email address may be leaked when sending an S/MIME encrypted email using a certificate with more than one email address. Existía un problema de S/MIME en el manejo del correo electrónico cifrado. • https://support.apple.com/en-us/HT212976 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30997
https://notcve.org/view.php?id=CVE-2021-30997
24 Aug 2021 — A S/MIME issue existed in the handling of encrypted email. This issue was addressed by not automatically loading some MIME parts. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker may be able to recover plaintext contents of an S/MIME-encrypted e-mail. Existía un problema de S/MIME en el manejo del correo electrónico cifrado. • https://support.apple.com/en-us/HT212976 • CWE-312: Cleartext Storage of Sensitive Information •