deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-9930
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT211289; https://support.apple.com/en-us/HT211289
CVE: CVE-2020-9955
Published: 2021-04-02
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9956
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9960
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9962
Published: 2021-04-02
Description: A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9967
Published: 2021-04-02
Description: Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/163501/XNU-Network-Stack-Kernel-Heap-Overflow.html; https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844
CVE: CVE-2020-9971
Published: 2021-04-02
Description: A logic issue was addressed with improved validation. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9975
Published: 2021-04-02
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9978
Published: 2021-04-02
Description: This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An attacker in a privileged network position may be able to unexpectedly alter application state.
CVSS Score: 4.5 (MEDIUM)
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9995
Published: 2021-04-02
Description: An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in macOS Server 5.11. Processing a maliciously crafted URL may lead to an open redirect or cross site scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-601
References: https://support.apple.com/en-us/HT211932; https://support.apple.com/en-us/HT211932
CVE: CVE-2021-1736
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212147
CVE: CVE-2021-1737
Published: 2021-04-02
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212147; https://support.apple.com/kb/HT212146; https://support.apple.com/en-us/HT212147
CVE: CVE-2021-1738
Published: 2021-04-02
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212147; https://support.apple.com/kb/HT212146; https://support.apple.com/en-us/HT212147
CVE: CVE-2021-1741
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1742
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1743
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1744
Published: 2021-04-02
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1745
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212146
CVE: CVE-2021-1746
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1747
Published: 2021-04-02
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing maliciously crafted web content may lead to code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1748
Published: 2021-04-02
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212148; https://support.apple.com/en-us/HT212149
CVE: CVE-2021-1750
Published: 2021-04-02
Description: Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1751
Published: 2021-04-02
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212147
CVE: CVE-2021-1754
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1755
Published: 2021-04-02
Description: A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVSS Score: 2.4 (LOW)
CWE: CWE-862
References: https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT211931
CVE: CVE-2021-1756
Published: 2021-04-02
Description: A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker with physical access to a device may be able to see private contact information.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212146
CVE: CVE-2021-1757
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1758
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1759
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212149
CVE: CVE-2021-1760
Published: 2021-04-02
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application could execute arbitrary code leading to compromise of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1763
Published: 2021-04-02
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212146
CVE: CVE-2021-1764
Published: 2021-04-02
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1765
Published: 2021-04-02
Description: This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy.
CVSS Score: 6.5 (MEDIUM)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/; https://security.gentoo.org/glsa/202104-03
CVE: CVE-2021-1766
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1767
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212146
CVE: CVE-2021-1768
Published: 2021-04-02
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212146
CVE: CVE-2021-1769
Published: 2021-04-02
Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1771
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212147
CVE: CVE-2021-1772
Published: 2021-04-02
Description: A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted text file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1773
Published: 2021-04-02
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1774
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1775
Published: 2021-04-02
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212147
CVE: CVE-2021-1776
Published: 2021-04-02
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1777
Published: 2021-04-02
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1778
Published: 2021-04-02
Description: An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212148
CVE: CVE-2021-1779
Published: 2021-04-02
Description: A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212147
CVE: CVE-2021-1780
Published: 2021-04-02
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212146
CVE: CVE-2021-1781
Published: 2021-04-02
Description: A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A malicious application may be able to leak sensitive user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212146; https://support.apple.com/en-us/HT212147; https://support.apple.com/en-us/HT212146