CVSS: 5.5EPSS: 0%CPEs: 13EXPL: 0CVE-2021-30855 – Apple Security Advisory 2021-10-26-9
https://notcve.org/view.php?id=CVE-2021-30855
24 Aug 2021 — A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. An application may be able to access restricted files. Se presentó un problema de comprobación en el manejo de los enlaces simbólicos. • https://support.apple.com/en-us/HT212804 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 5.5EPSS: 0%CPEs: 29EXPL: 0CVE-2021-30782 – Apple Security Advisory 2021-07-21-3
https://notcve.org/view.php?id=CVE-2021-30782
23 Jul 2021 — This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to access restricted files. Este problema se abordó con comprobaciones mejoradas. Este problema se corrigió en macOS Big Sur versión 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. • https://support.apple.com/en-us/HT212600 •
CVSS: 7.8EPSS: 1%CPEs: 49EXPL: 0CVE-2021-30759 – Apple macOS libType1Scaler PFB Font Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-30759
23 Jul 2021 — A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution. Se abordó un desbordamiento de pila con una comprobación de entrada mejorada. Este problema se corrigió en iOS versión 14.7, macOS Big Sur versión 11.5, watchOS versión 7.6, tvOS versión 14.7, Security Update 2021-005 Mojav... • https://support.apple.com/en-us/HT212600 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 32EXPL: 0CVE-2021-30790 – Apple macOS AppKit PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-30790
23 Jul 2021 — An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution. Se abordó un problema de divulgación de información al eliminar el código vulnerable. Este problema se corrigió en macOS Big Sur versión 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. • https://support.apple.com/en-us/HT212600 •
CVSS: 5.5EPSS: 0%CPEs: 45EXPL: 0CVE-2021-30733 – Apple Security Advisory 2021-07-21-3
https://notcve.org/view.php?id=CVE-2021-30733
23 Jul 2021 — An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted font may result in the disclosure of process memory. Se abordó una lectura fuera de límites con una comprobación de entrada mejorada. Este problema se corrigió en tvOS versión 14.6, iOS versión 14.6 e iPadOS versión 14.6, Security Update 2021-004 Cat... • https://support.apple.com/en-us/HT212528 • CWE-125: Out-of-bounds Read •
CVSS: 9.3EPSS: 0%CPEs: 32EXPL: 0CVE-2021-30777 – Apple Security Advisory 2021-07-21-3
https://notcve.org/view.php?id=CVE-2021-30777
23 Jul 2021 — An injection issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to gain root privileges. Se abordó un problema de inyección con una comprobación mejorada. Este problema se corrigió en macOS Big Sur versión 11.5, Security Update 2021-004 Catalina y Security Update 2021-005 Mojave. • https://support.apple.com/en-us/HT212600 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 7.8EPSS: 0%CPEs: 32EXPL: 0CVE-2021-30784 – Apple Security Advisory 2021-07-21-2
https://notcve.org/view.php?id=CVE-2021-30784
23 Jul 2021 — Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.5. A local attacker may be able to execute code on the Apple T2 Security Chip. Se abordaron múltiples problemas con una lógica mejorada. Este problema se corrigió en macOS Big Sur versión 11.5. • https://support.apple.com/en-us/HT212602 •
CVSS: 5.5EPSS: 0%CPEs: 34EXPL: 0CVE-2021-30791 – Apple macOS ModelIO ABC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-30791
23 Jul 2021 — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted file may disclose user information. Se abordó una lectura fuera de límites con una comprobación de límites mejorada. Este problema se corrigió en iOS versión 14.7, macOS Big Sur versión 11.5. • https://support.apple.com/en-us/HT212601 • CWE-125: Out-of-bounds Read •
CVSS: 9.3EPSS: 0%CPEs: 35EXPL: 0CVE-2021-30780 – Apple Security Advisory 2021-07-21-3
https://notcve.org/view.php?id=CVE-2021-30780
23 Jul 2021 — An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A malicious application may be able to gain root privileges. Se abordó un problema de escritura fuera de límites con una comprobación de límites mejorada. Este problema se corrigió en iOS versión 14.7, macOS Big Sur versión 11.5, watchOS versión 7.6, tvOS versión 14.7, Security Update 2021-00... • https://support.apple.com/en-us/HT212600 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 34EXPL: 0CVE-2021-30792 – Apple macOS ModelIO ABC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-30792
23 Jul 2021 — An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted image may lead to arbitrary code execution. Se abordó una escritura fuera de límites con una comprobación de entrada mejorada. Este problema se corrigió en iOS versión 14.7, macOS Big Sur versión 11.5. • https://support.apple.com/en-us/HT212601 • CWE-787: Out-of-bounds Write •