deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-30803
Published: 2021-09-08
Description: A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access a user’s recent Contacts.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30804
Published: 2021-09-08
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 14.7. A malicious application may be able to access Find My data.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212601
CVE: CVE-2021-30805
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-35217
Published: 2021-09-08
Description: Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported to us by ZDI. An Authenticated Attacker could exploit it by executing WSAsyncExecuteTasks deserialization of untrusted data.
CVSS Score: 8.9 (HIGH)
CWE: CWE-502
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35217
CVE: CVE-2020-27940
Published: 2021-09-08
Description: This issue was addressed with improved file handling. This issue is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0. An attacker with file system access may modify scripts used by the app.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/HT212197; https://support.apple.com/en-us/HT212197
CVE: CVE-2020-27942
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327; https://support.apple.com/en-us/HT212326
CVE: CVE-2021-1739
Published: 2021-09-08
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1740
Published: 2021-09-08
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1762
Published: 2021-09-08
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212146
CVE: CVE-2021-1770
Published: 2021-09-08
Description: A buffer overflow may result in arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A logic issue was addressed with improved state management.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1784
Published: 2021-09-08
Description: A permissions issue existed in DiskArbitration. This was addressed with additional ownership checks. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to modify protected parts of the file system.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1807
Published: 2021-09-08
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4. A local user may be able to write arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212324; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1808
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to read restricted memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1809
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to read restricted memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1810
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks.
CVSS Score: 5.5 (MEDIUM)
References: http://packetstormsecurity.com/files/164375/Gatekeeper-Bypass-Proof-Of-Concept.html; https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326
CVE: CVE-2021-1811
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212319; https://support.apple.com/en-us/HT212321
CVE: CVE-2021-1812
Published: 2021-09-08
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1813
Published: 2021-09-08
Description: A validation issue was addressed with improved logic. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1814
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212324; https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1815
Published: 2021-09-08
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1816
Published: 2021-09-08
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1817
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1820
Published: 2021-09-08
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1822
Published: 2021-09-08
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1824
Published: 2021-09-08
Description: This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application with root privileges may be able to access private information.
CVSS Score: 4.4 (MEDIUM)
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-1825
Published: 2021-09-08
Description: An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212318; https://support.apple.com/en-us/HT212319
CVE: CVE-2021-1826
Published: 2021-09-08
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1828
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. An application may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1829
Published: 2021-09-08
Description: A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-1830
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1831
Published: 2021-09-08
Description: The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1832
Published: 2021-09-08
Description: Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. The issue was addressed with improved permissions logic.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1833
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1834
Published: 2021-09-08
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1835
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to access notes from the lock screen.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1836
Published: 2021-09-08
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, tvOS 14.5. A local user may be able to create or modify privileged files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1837
Published: 2021-09-08
Description: A certificate validation issue was addressed. This issue is fixed in iOS 14.5 and iPadOS 14.5. An attacker in a privileged network position may be able to alter network traffic.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1838
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212146
CVE: CVE-2021-1839
Published: 2021-09-08
Description: The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1840
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1841
Published: 2021-09-08
Description: A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. An out-of-bounds write issue was addressed with improved bounds checking.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-1843
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1846
Published: 2021-09-08
Description: Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds read was addressed with improved input validation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1847
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1848
Published: 2021-09-08
Description: The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1849
Published: 2021-09-08
Description: An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1851
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1852
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1853
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-1854
Published: 2021-09-08
Description: A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops. .
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1855
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to force unnecessary network connections to fetch its favicon.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-1857
Published: 2021-09-08
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may disclose sensitive user information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212319; https://support.apple.com/en-us/HT212321
CVE: CVE-2021-1858
Published: 2021-09-08
Description: Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds write issue was addressed with improved bounds checking.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1859
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. Locked Notes content may have been unexpectedly unlocked.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212325