deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-30742
Published: 2021-09-08
Description: A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-30743
Published: 2021-09-08
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-30744
Published: 2021-09-08
Description: Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to universal cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30746
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30748
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/kb/HT212604
CVE: CVE-2021-30749
Published: 2021-09-08
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30750
Published: 2021-09-08
Description: The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3. A malicious application may be able to access the user's recent contacts.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-30751
Published: 2021-09-08
Description: This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass certain Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212529
CVE: CVE-2021-30752
Published: 2021-09-08
Description: Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An out-of-bounds read was addressed with improved input validation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-30753
Published: 2021-09-08
Description: Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. An out-of-bounds read was addressed with improved input validation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30755
Published: 2021-09-08
Description: Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5. An out-of-bounds read was addressed with improved input validation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532; https://support.apple.com/en-us/HT212533
CVE: CVE-2021-30756
Published: 2021-09-08
Description: A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6. A privacy issue in Now Playing was addressed with improved permissions.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212528
CVE: CVE-2021-30757
Published: 2021-09-08
Description: This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212549; https://support.apple.com/en-us/HT212549
CVE: CVE-2021-30758
Published: 2021-09-08
Description: A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212604
CVE: CVE-2021-30759
Published: 2021-09-08
Description: A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30760
Published: 2021-09-08
Description: An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30761
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT212548; https://support.apple.com/en-us/HT212548; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30761
CVE: CVE-2021-30762
Published: 2021-09-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/HT212548; https://support.apple.com/en-us/HT212548; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30762
CVE: CVE-2021-30763
Published: 2021-09-08
Description: An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.7, watchOS 7.6. A shortcut may be able to bypass Internet permission requirements.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212605; https://support.apple.com/en-us/HT212601
CVE: CVE-2021-30764
Published: 2021-09-08
Description: Processing a maliciously crafted file may lead to arbitrary code execution. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. This issue was addressed with improved checks.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-30765
Published: 2021-09-08
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-30766
Published: 2021-09-08
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-30768
Published: 2021-09-08
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30769
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212604; https://support.apple.com/en-us/HT212605
CVE: CVE-2021-30770
Published: 2021-09-08
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212604; https://support.apple.com/en-us/HT212605
CVE: CVE-2021-30772
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212602; https://support.apple.com/kb/HT212600; https://support.apple.com/kb/HT212603
CVE: CVE-2021-30773
Published: 2021-09-08
Description: An issue in code signature validation was addressed with improved checks. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. A malicious application may be able to bypass code signing checks.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212604; https://support.apple.com/en-us/HT212605
CVE: CVE-2021-30774
Published: 2021-09-08
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212604
CVE: CVE-2021-30775
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30776
Published: 2021-09-08
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Playing a malicious audio file may lead to an unexpected application termination.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30777
Published: 2021-09-08
Description: An injection issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-30778
Published: 2021-09-08
Description: This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30779
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212604
CVE: CVE-2021-30780
Published: 2021-09-08
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30781
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. A local attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30782
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to access restricted files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-30783
Published: 2021-09-08
Description: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 6.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2021/Sep/40; https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30784
Published: 2021-09-08
Description: Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.5. A local attacker may be able to execute code on the Apple T2 Security Chip.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212602; https://support.apple.com/kb/HT212600; https://support.apple.com/kb/HT212603
CVE: CVE-2021-30785
Published: 2021-09-08
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30786
Published: 2021-09-08
Description: A race condition was addressed with improved state handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212601
CVE: CVE-2021-30787
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-30788
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.
CVSS Score: 7.1 (HIGH)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30789
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30790
Published: 2021-09-08
Description: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-30791
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted file may disclose user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/kb/HT212600
CVE: CVE-2021-30792
Published: 2021-09-08
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/kb/HT212600
CVE: CVE-2021-30793
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-30795
Published: 2021-09-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212604
CVE: CVE-2021-30796
Published: 2021-09-08
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing a maliciously crafted image may lead to a denial of service.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30797
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212604
CVE: CVE-2021-30798
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6. A malicious application may be able to bypass certain Privacy preferences.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212605
CVE: CVE-2021-30799
Published: 2021-09-08
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30800
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.7. Joining a malicious Wi-Fi network may result in a denial of service or arbitrary code execution.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212601
CVE: CVE-2021-30802
Published: 2021-09-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.7, tvOS 14.7. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT212601; https://support.apple.com/en-us/HT212604; https://support.apple.com/en-us/HT212601