CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2021-31005
https://notcve.org/view.php?id=CVE-2021-31005
24 Aug 2021 — Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, macOS Monterey 12.0.1. Turning off "Block all remote content" may not apply to all remote content types. Descripción: Se ha solucionado un problema de lógica con la mejora de la gestión de estados. Este problema se ha solucionado en iOS 15 y iPadOS 15, macOS Monterey 12.0.1. • https://support.apple.com/en-us/HT212814 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-31001
https://notcve.org/view.php?id=CVE-2021-31001
24 Aug 2021 — An access issue was addressed with improved access restrictions. This issue is fixed in iOS 15 and iPadOS 15. An attacker in a privileged network position may be able to leak sensitive user information. Se ha solucionado un problema de permisos con una validación mejorada. Este problema se ha solucionado en iOS 15.2 y iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. • https://support.apple.com/en-us/HT212814 •
CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2021-31000
https://notcve.org/view.php?id=CVE-2021-31000
24 Aug 2021 — A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious application may be able to read sensitive contact information. Se ha solucionado un problema de permisos con una validación mejorada. Este problema se ha solucionado en iOS 15.2 y iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. • https://support.apple.com/en-us/HT212975 • CWE-276: Incorrect Default Permissions •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30999
https://notcve.org/view.php?id=CVE-2021-30999
24 Aug 2021 — The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be unable to fully delete browsing history. El problema se ha solucionado con una lógica de permisos mejorada. Este problema se ha solucionado en iOS 14.6 y iPadOS 14.6. • https://support.apple.com/en-us/HT212528 • CWE-276: Incorrect Default Permissions •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30998
https://notcve.org/view.php?id=CVE-2021-30998
24 Aug 2021 — A S/MIME issue existed in the handling of encrypted email. This issue was addressed with improved selection of the encryption certificate. This issue is fixed in iOS 15.2 and iPadOS 15.2. A sender's email address may be leaked when sending an S/MIME encrypted email using a certificate with more than one email address. Existía un problema de S/MIME en el manejo del correo electrónico cifrado. • https://support.apple.com/en-us/HT212976 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30997
https://notcve.org/view.php?id=CVE-2021-30997
24 Aug 2021 — A S/MIME issue existed in the handling of encrypted email. This issue was addressed by not automatically loading some MIME parts. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker may be able to recover plaintext contents of an S/MIME-encrypted e-mail. Existía un problema de S/MIME en el manejo del correo electrónico cifrado. • https://support.apple.com/en-us/HT212976 • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 7.6EPSS: 0%CPEs: 3EXPL: 0CVE-2021-30996 – Apple Security Advisory 2021-12-15-1
https://notcve.org/view.php?id=CVE-2021-30996
24 Aug 2021 — A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges. Se solucionó una condición de carrera con un manejo de estado mejorado. Este problema se solucionó en macOS Monterey versión 12.1, iOS versión 15.2 e iPadOS versión 15.2. • https://support.apple.com/en-us/HT212976 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2021-30995 – Apple macOS fclonefileat Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2021-30995
24 Aug 2021 — A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to elevate privileges. Se solucionó una condición de carrera con un manejo de estado mejorado. Este problema se solucionó en macOS Big Sur versión 11.6.2, tvOS versión 15.2, macOS Monterey versión 12.1, actualización de seguridad 2021-008 Catalina, iOS versió... • https://support.apple.com/en-us/HT212975 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 8.1EPSS: 0%CPEs: 5EXPL: 0CVE-2021-30993 – Apple Security Advisory 2021-12-15-1
https://notcve.org/view.php?id=CVE-2021-30993
24 Aug 2021 — A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. An attacker in a privileged network position may be able to execute arbitrary code. Se solucionó un problema de desbordamiento del búfer con una administración de la memoria mejorada. Este problema se solucionó en macOS Monterey versión 12.1, watchOS versión 8.3, iOS versión 15.2 e iPadOS versión 15.2, tvOS versión 15.2. • https://support.apple.com/en-us/HT212975 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30992
https://notcve.org/view.php?id=CVE-2021-30992
24 Aug 2021 — This issue was addressed with improved handling of file metadata. This issue is fixed in iOS 15.2 and iPadOS 15.2. A user in a FaceTime call may unexpectedly leak sensitive user information through Live Photos metadata. Este problema se solucionó con un manejo de los metadatos de archivo mejorado. Este problema se solucionó en iOS versión 15.2 e iPadOS versión 15.2. • https://support.apple.com/en-us/HT212976 •