Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
Affected Products: Windows 10 Version 1809
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675'}, {'name': 'VU#383432', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'https://www.kb.cert.org/vuls/id/383432'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html'}]
CVE State: PUBLISHED
Explain CVE-2021-1676
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1676'}]
CVE State: PUBLISHED
Explain CVE-2021-1678
NTLM Security Feature Bypass Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1678'}]
CVE State: PUBLISHED
Explain CVE-2021-1679
Windows CryptoAPI Denial of Service Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1679'}]
CVE State: PUBLISHED
Explain CVE-2021-1680
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1651.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1680'}]
CVE State: PUBLISHED
Explain CVE-2021-1681
Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1686, CVE-2021-1687, CVE-2021-1690.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1681'}]
CVE State: PUBLISHED
Explain CVE-2021-1682
Windows Kernel Elevation of Privilege Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1682'}]
CVE State: PUBLISHED
Explain CVE-2021-1683
Windows Bluetooth Security Feature Bypass Vulnerability This CVE ID is unique from CVE-2021-1638, CVE-2021-1684.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1683'}]
CVE State: PUBLISHED
Explain CVE-2021-1684
Windows Bluetooth Security Feature Bypass Vulnerability This CVE ID is unique from CVE-2021-1638, CVE-2021-1683.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1684'}]
CVE State: PUBLISHED
Explain CVE-2021-1685
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1642.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1685'}]
CVE State: PUBLISHED
Explain CVE-2021-1686
Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1681, CVE-2021-1687, CVE-2021-1690.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1686'}]
CVE State: PUBLISHED
Explain CVE-2021-1687
Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1681, CVE-2021-1686, CVE-2021-1690.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1687'}]
CVE State: PUBLISHED
Explain CVE-2021-1688
Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652, CVE-2021-1653, CVE-2021-1654, CVE-2021-1655, CVE-2021-1659, CVE-2021-1693.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1688'}]
CVE State: PUBLISHED
Explain CVE-2021-1689
Windows Multipoint Management Elevation of Privilege Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1689'}]
CVE State: PUBLISHED
Explain CVE-2021-1690
Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1681, CVE-2021-1686, CVE-2021-1687.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1690'}]
CVE State: PUBLISHED
Explain CVE-2021-1691
Hyper-V Denial of Service Vulnerability This CVE ID is unique from CVE-2021-1692.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1691'}]
CVE State: PUBLISHED
Explain CVE-2021-1692
Hyper-V Denial of Service Vulnerability This CVE ID is unique from CVE-2021-1691.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1692'}]
CVE State: PUBLISHED
Explain CVE-2021-1693
Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1652, CVE-2021-1653, CVE-2021-1654, CVE-2021-1655, CVE-2021-1659, CVE-2021-1688.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1693'}]
CVE State: PUBLISHED
Explain CVE-2021-1695
Windows Print Spooler Elevation of Privilege Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1695'}]
CVE State: PUBLISHED
Explain CVE-2021-1696
Windows Graphics Component Information Disclosure Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1696'}]
CVE State: PUBLISHED
Explain CVE-2021-1697
Windows InstallService Elevation of Privilege Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1697'}]
CVE State: PUBLISHED
Explain CVE-2021-1698
Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1732.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1698'}]
CVE State: PUBLISHED
Explain CVE-2021-1699
Windows (modem.sys) Information Disclosure Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1699'}]
CVE State: PUBLISHED
Explain CVE-2021-1700
Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1658, CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1701.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1700'}]
CVE State: PUBLISHED
Explain CVE-2021-1701
Remote Procedure Call Runtime Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1658, CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1700.
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1701'}]
CVE State: PUBLISHED
Explain CVE-2021-1702
Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1702'}]
CVE State: PUBLISHED
Explain CVE-2021-1703
Windows Event Logging Service Elevation of Privilege Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1703'}]
CVE State: PUBLISHED
Explain CVE-2021-1704
Windows Hyper-V Elevation of Privilege Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1704'}]
CVE State: PUBLISHED
Explain CVE-2021-1705
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
Affected Products: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1705'}]
CVE State: PUBLISHED
Explain CVE-2021-1708
Windows GDI+ Information Disclosure Vulnerability
Affected Products: Windows 10 Version 2004 for ARM64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1708'}]
CVE State: PUBLISHED
Explain CVE-2021-1709
Windows Win32k Elevation of Privilege Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1709'}]
CVE State: PUBLISHED
Explain CVE-2021-1710
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1710'}]
CVE State: PUBLISHED
Explain CVE-2021-1712
Microsoft SharePoint Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1719.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1712'}]
CVE State: PUBLISHED
Explain CVE-2021-1713
Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1714.
Affected Products: Microsoft Office
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1713'}]
CVE State: PUBLISHED
Explain CVE-2021-1714
Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1713.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1714'}]
CVE State: PUBLISHED
Explain CVE-2021-1715
Microsoft Word Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1716.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1715'}]
CVE State: PUBLISHED
Explain CVE-2021-1716
Microsoft Word Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-1715.
Affected Products: Microsoft Office Web Apps
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1716'}]
CVE State: PUBLISHED
Explain CVE-2021-1717
Microsoft SharePoint Spoofing Vulnerability This CVE ID is unique from CVE-2021-1641.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1717'}]
CVE State: PUBLISHED
Explain CVE-2021-1719
Microsoft SharePoint Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1712.
Affected Products: Microsoft SharePoint Enterprise Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1719'}]
CVE State: PUBLISHED
Explain CVE-2021-1721
.NET Core and Visual Studio Denial of Service Vulnerability
Affected Products: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 â€“ 16.6)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1721'}]
CVE State: PUBLISHED
Explain CVE-2021-1722
Windows Fax Service Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24077.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1722'}]
CVE State: PUBLISHED
Explain CVE-2021-1729
Windows Update Stack Setup Elevation of Privilege Vulnerability
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1729'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-21-284/'}]
CVE State: PUBLISHED
Explain CVE-2021-1730
Microsoft Exchange Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-24085.
Affected Products: Microsoft Exchange Server 2019 Cumulative Update 7
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1730'}]
CVE State: PUBLISHED
Explain CVE-2021-1731
PFX Encryption Security Feature Bypass Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1731'}]
CVE State: PUBLISHED
Explain CVE-2021-1732
Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1698.
Affected Products: Windows
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html'}]
CVE State: PUBLISHED
Explain CVE-2021-1734
Windows Remote Procedure Call Information Disclosure Vulnerability
Affected Products: Windows 10 Version 20H2 for x64-based Systems
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1734'}]
CVE State: PUBLISHED
Explain CVE-2021-1736
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}]
CVE State: PUBLISHED
Explain CVE-2021-1737
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}]
CVE State: PUBLISHED
Explain CVE-2021-1738
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}]
CVE State: PUBLISHED
Explain CVE-2021-1739
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED
Explain CVE-2021-1740
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}]
CVE State: PUBLISHED
Explain CVE-2021-1741
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1742
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1743
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1744
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1745
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1746
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1747
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing maliciously crafted web content may lead to code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1748
A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1750
Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. An application may be able to execute arbitrary code with kernel privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1751
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}]
CVE State: PUBLISHED
Explain CVE-2021-1753
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1754
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1755
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT211931'}]
CVE State: PUBLISHED
Explain CVE-2021-1756
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker with physical access to a device may be able to see private contact information.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1757
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1758
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1759
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1760
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application could execute arbitrary code leading to compromise of user information.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1761
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause a denial of service.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1762
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1763
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1764
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause a denial of service.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1765
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'name': 'FEDORA-2021-864dc37032', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/'}, {'name': 'FEDORA-2021-619711d709', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/'}, {'name': 'GLSA-202104-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202104-03'}]
CVE State: PUBLISHED
Explain CVE-2021-1766
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1767
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to heap corruption.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1768
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1769
A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1770
A buffer overflow may result in arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A logic issue was addressed with improved state management.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED
Explain CVE-2021-1771
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}]
CVE State: PUBLISHED
Explain CVE-2021-1772
A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted text file may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.zerodayinitiative.com/advisories/ZDI-21-758/'}]
CVE State: PUBLISHED
Explain CVE-2021-1773
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1774
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1775
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}]
CVE State: PUBLISHED
Explain CVE-2021-1776
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1777
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1778
An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1779
A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}]
CVE State: PUBLISHED
Explain CVE-2021-1780
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1781
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A malicious application may be able to leak sensitive user information.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED
Explain CVE-2021-1782
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1783
An access issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1784
A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to modify protected parts of the file system.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED
Explain CVE-2021-1785
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1786
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED
Explain CVE-2021-1787
Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED