deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-22465
Published: 2021-10-28
Description: A component of the HarmonyOS has a Heap-based Buffer Overflow vulnerability. Local attackers may exploit this vulnerability to cause Kernel System unavailable.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]
CVE: CVE-2021-22466
Published: 2021-10-28
Description: A component of the HarmonyOS has a Use After Free vulnerability. Local attackers may exploit this vulnerability to cause kernel crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]
CVE: CVE-2021-22467
Published: 2021-10-28
Description: A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]
CVE: CVE-2021-22468
Published: 2021-10-28
Description: A component of the HarmonyOS has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability. Local attackers may exploit this vulnerability to cause kernel address leakage.
CVSS Score: 3.3 (LOW)
CWE: CWE-668
References: https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]
CVE: CVE-2021-22469
Published: 2021-10-28
Description: A component of the HarmonyOS has a Out-of-bounds Read vulnerability. Local attackers may exploit this vulnerability to cause kernel out-of-bounds read.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]
CVE: CVE-2021-22470
Published: 2021-10-28
Description: A component of the HarmonyOS has a Privileges Controls vulnerability. Local attackers may exploit this vulnerability to expand the Recording Trusted Domain.
CVSS Score: 7.8 (HIGH)
References: https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]
CVE: CVE-2021-22471
Published: 2021-10-28
Description: A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202107-[PII_REDACTED]
CVE: CVE-2021-22472
Published: 2021-10-28
Description: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22473
Published: 2021-10-28
Description: There is an Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22474
Published: 2021-10-28
Description: There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22475
Published: 2021-10-28
Description: There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22481
Published: 2021-10-28
Description: There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22482
Published: 2021-10-28
Description: There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of invalid data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-909
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22483
Published: 2021-10-28
Description: There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22485
Published: 2021-10-28
Description: There is a SSID vulnerability with Wi-Fi network connections in Huawei devices.Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22486
Published: 2021-10-28
Description: There is a issue of Unstandardized field names in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22487
Published: 2021-10-28
Description: There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22488
Published: 2021-10-28
Description: There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22490
Published: 2021-10-28
Description: There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect the device performance.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-22491
Published: 2021-10-28
Description: There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36985
Published: 2021-10-28
Description: There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and cause the system to restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36986
Published: 2021-10-28
Description: There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
CVSS Score: 9.8 (CRITICAL)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36987
Published: 2021-10-28
Description: There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause the system to restart.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36988
Published: 2021-10-28
Description: There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36989
Published: 2021-10-28
Description: There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36990
Published: 2021-10-28
Description: There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36991
Published: 2021-10-28
Description: There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulnerability by creating malicious file paths can cause unauthorized file access.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36992
Published: 2021-10-28
Description: There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36993
Published: 2021-10-28
Description: There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36994
Published: 2021-10-28
Description: There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successful exploitation of this vulnerability can cause exceptions when managing the system trustlist.
CVSS Score: 3.7 (LOW)
CWE: CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36995
Published: 2021-10-28
Description: There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36996
Published: 2021-10-28
Description: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual information.
CVSS Score: 5.3 (MEDIUM)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36997
Published: 2021-10-28
Description: There is a Low memory error in Huawei Smartphone due to the unlimited size of images to be parsed.Successful exploitation of this vulnerability may cause the Gallery or Files app to exit unexpectedly.
CVSS Score: 5.3 (MEDIUM)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36998
Published: 2021-10-28
Description: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to read an array that is out of bounds.
CVSS Score: 5.3 (MEDIUM)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-36999
Published: 2021-10-28
Description: There is a Buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by sending malicious images and inducing users to open the images may cause remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-37001
Published: 2021-10-28
Description: There is a Register tampering vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow the register value to be modified.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2021-37002
Published: 2021-10-28
Description: There is a Memory out-of-bounds access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause malicious code to be executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://consumer.huawei.com/en/support/bulletin/2021/7/; https://consumer.huawei.com/en/support/bulletin/2021/7/
CVE: CVE-2018-14640
Published: 2021-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
CVE: CVE-2018-1105
Published: 2021-10-28
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-37254
Published: 2021-10-28
Description: In M-Files Web product with versions before 20.10.9524.1 and 20.10.9445.0, a remote attacker could use a flaw to obtain unauthenticated access to 3rd party component license key information on server.
CVSS Score: 7.5 (HIGH)
References: https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-37254/; https://www.m-files.com/company/trust-center/vulnerability-disclosure/; https://www.m-files.com/about/trust-center/security-vulnerabilities/cve-2021-37254/
CVE: CVE-2021-3576
Published: 2021-10-28
Description: Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 25.0.26.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250, CWE-269
References: https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-seimpersonateprivilege-in-bitdefender-endpoint-security-tools-va-9848/; https://www.zerodayinitiative.com/advisories/ZDI-21-1276/; https://www.zerodayinitiative.com/advisories/ZDI-21-1376/
CVE: CVE-2021-3579
Published: 2021-10-28
Description: Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.bitdefender.com/support/security-advisories/incorrect-default-permissions-vulnerability-in-bdservicehost-exe-and-vulnerability-scan-exe-va-9848/; https://www.zerodayinitiative.com/advisories/ZDI-21-1277/; https://www.bitdefender.com/support/security-advisories/incorrect-default-permissions-vulnerability-in-bdservicehost-exe-and-vulnerability-scan-exe-va-9848/
CVE: CVE-2021-3823
Published: 2021-10-28
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects: Bitdefender GravityZone versions prior to 3.3.8.249.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.bitdefender.com/support/security-advisories/path-traversal-vulnerability-in-bitdefender-gravitzone-update-server-in-relay-mode-va-10039/; https://www.bitdefender.com/support/security-advisories/path-traversal-vulnerability-in-bitdefender-gravitzone-update-server-in-relay-mode-va-10039/
CVE: CVE-2020-22312
Published: 2021-10-28
Description: A cross-site scripting (XSS) vulnerability was discovered in the OJ/admin-tool /cal_scores.php function of HZNUOJ v1.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/wlx65003/HZNUOJ/issues/17; https://github.com/wlx65003/HZNUOJ/issues/17
CVE: CVE-2021-41728
Published: 2021-10-28
Description: Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dir0x/CVE-2021-41728; https://github.com/Dir0x/CVE-2021-41728
CVE: CVE-2020-7875
Published: 2021-10-28
Description: DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-494, CWE-494
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36312; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36312
CVE: CVE-2021-22044
Published: 2021-10-28
Description: In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to `@RequestMapping`-annotated interface methods.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-668
References: https://tanzu.vmware.com/security/cve-2021-22044; https://tanzu.vmware.com/security/cve-2021-22044
CVE: CVE-2021-22047
Published: 2021-10-28
Description: In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for unauthorized access depending on the Spring Security configuration.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://tanzu.vmware.com/security/cve-2021-22047; https://tanzu.vmware.com/security/cve-2021-22047
CVE: CVE-2021-22096
Published: 2021-10-28
Description: In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-117
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://tanzu.vmware.com/security/cve-2021-22096; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2021-22097
Published: 2021-10-28
Description: In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a body for a message with content type application/x-java-serialized-object. It is possible to construct a malicious java.util.Dictionary object that can cause 100% CPU usage in the application if the toString() method is called.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://tanzu.vmware.com/security/cve-2021-22097; https://tanzu.vmware.com/security/cve-2021-22097
CVE: CVE-2021-3745
Published: 2021-10-28
Description: flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-434
References: https://github.com/flatcore/flatcore-cms/commit/5cc3937b6bc38293ec921a5cf00018b48b668dc6; https://huntr.dev/bounties/7879ab3d-8018-402a-aa0b-131bdbd1966c; https://github.com/flatcore/flatcore-cms/commit/5cc3937b6bc38293ec921a5cf00018b48b668dc6
CVE: CVE-2020-10005
Published: 2021-10-28
Description: A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. An attacker in a privileged network position may be able to perform denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://support.apple.com/en-us/HT211931; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1246; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-25422
Published: 2021-10-28
Description: A cross site scripting (XSS) vulnerability in menuedit.php of Mara CMS 7.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/r0ck3t1973/xss_payload/issues/2; https://github.com/r0ck3t1973/xss_payload/issues/2
CVE: CVE-2020-29629
Published: 2021-10-28
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-9897
Published: 2021-10-28
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1. Processing a maliciously crafted PDF may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT211929
CVE: CVE-2021-1821
Published: 2021-10-28
Description: A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big Sur 11.5. Visiting a maliciously crafted webpage may lead to a system denial of service.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212602; https://support.apple.com/en-us/HT212605; https://support.apple.com/en-us/HT212602
CVE: CVE-2021-30808
Published: 2021-10-28
Description: This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A malicious application may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212815; https://support.apple.com/en-us/HT212819
CVE: CVE-2021-30809
Published: 2021-10-28
Description: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2021/12/20/6; https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212815