CVSS: 8.6EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30864 – Apple Security Advisory 2021-10-26-3
https://notcve.org/view.php?id=CVE-2021-30864
24 Aug 2021 — A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A sandboxed process may be able to circumvent sandbox restrictions. Se abordó un problema lógico con una administración de estado mejorada. Este problema se corrigió en macOS Monterey versión 12.0.1. • https://support.apple.com/en-us/HT212869 •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-30861 – Apple Security Advisory 2021-10-26-3
https://notcve.org/view.php?id=CVE-2021-30861
24 Aug 2021 — A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may bypass Gatekeeper checks. Se abordó un problema lógico con una administración de estado mejorada. Este problema se corrigió en macOS Monterey versión 12.0.1. • https://support.apple.com/en-us/HT212869 •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 2CVE-2021-30860 – Apple Multiple Products Integer Overflow Vulnerability
https://notcve.org/view.php?id=CVE-2021-30860
24 Aug 2021 — An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Se ha solucionado un desbordamiento de enteros con una validación de entrada mejorada. • https://github.com/jeffssh/CVE-2021-30860 • CWE-190: Integer Overflow or Wraparound •
CVSS: 9.3EPSS: 0%CPEs: 11EXPL: 0CVE-2021-30859 – Apple Security Advisory 2021-09-20-8
https://notcve.org/view.php?id=CVE-2021-30859
24 Aug 2021 — A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Se abordó un problema de confusión de tipos con una administración de estado mejorada. Este problema se corrigió en iOS versión 14.8 y iPadOS versión 14.8, macOS Big Sur versión 11.6, Security Update 2021-005 Catalina. • https://support.apple.com/en-us/HT212804 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 2CVE-2021-30858 – Apple iOS, iPadOS, macOS Use-After-Free Vulnerability
https://notcve.org/view.php?id=CVE-2021-30858
24 Aug 2021 — A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Se ha solucionado un problema de uso después de la liberación con una mejor gestión de la memoria. • https://github.com/kmeps4/CVEREV3 • CWE-416: Use After Free •
CVSS: 7.6EPSS: 0%CPEs: 13EXPL: 0CVE-2021-30857 – Apple Security Advisory 2021-10-26-11
https://notcve.org/view.php?id=CVE-2021-30857
24 Aug 2021 — A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges. Se abordó una condición de carrera con un bloqueo mejorado. Este problema se corrigió en Security Update 2021-005 Catalina, iOS versión 14.8 y iPadOS versión 14.8, tvOS versión 15, iOS versión 15 y iPadOS versión 15, watchOS v... • https://support.apple.com/en-us/HT212804 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2021-30856
https://notcve.org/view.php?id=CVE-2021-30856
24 Aug 2021 — This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences. Este problema se solucionó añadiendo una nueva opción de inicio de sesión remoto para optar por el acceso a disco completo para las sesiones de Secure Shell. Este problema se ha solucionado en macOS Big Sur 11.3. • https://support.apple.com/en-us/HT212325 • CWE-863: Incorrect Authorization •
CVSS: 5.5EPSS: 0%CPEs: 13EXPL: 0CVE-2021-30855 – Apple Security Advisory 2021-10-26-9
https://notcve.org/view.php?id=CVE-2021-30855
24 Aug 2021 — A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. An application may be able to access restricted files. Se presentó un problema de comprobación en el manejo de los enlaces simbólicos. • https://support.apple.com/en-us/HT212804 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-30853 – Apple Security Advisory 2021-09-20-7
https://notcve.org/view.php?id=CVE-2021-30853
24 Aug 2021 — This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6. A malicious application may bypass Gatekeeper checks. Este problema se abordó con comprobaciones mejoradas. Este problema se corrigió en macOS Big Sur versión 11.6. • https://github.com/shubham0d/CVE-2021-30853 • CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0CVE-2021-30852 – Apple Security Advisory 2021-10-26-11
https://notcve.org/view.php?id=CVE-2021-30852
24 Aug 2021 — A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution. Se abordó un problema de confusión de tipos con un manejo de memoria mejorada. Este problema se corrigió en iOS versión 14.8 y iPadOS versión 14.8, tvOS versión 15, watchOS versión 8, iOS versión 15 y iPadOS versión 15. • https://support.apple.com/en-us/HT212807 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •