deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-1860
Published: 2021-09-08
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to disclose kernel memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1861
Published: 2021-09-08
Description: An issue existed in determining cache occupancy. The issue was addressed through improved logic. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to track users by setting state in a cache.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-1862
Published: 2021-09-08
Description: Description: A person with physical access may be able to access contacts. This issue is fixed in iOS 14.5 and iPadOS 14.5. Impact: An issue with Siri search access to information was addressed with improved logic.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1863
Published: 2021-09-08
Description: An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number.
CVSS Score: 2.4 (LOW)
CWE: CWE-287
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1864
Published: 2021-09-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1865
Published: 2021-09-08
Description: An issue obscuring passwords in screenshots was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible on screen.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-312
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1867
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, macOS Big Sur 11.3. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1868
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1872
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute being enabled.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212324; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-1873
Published: 2021-09-08
Description: An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text fields.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1874
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1875
Published: 2021-09-08
Description: A double free issue was addressed with improved memory management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted file may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1876
Published: 2021-09-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1877
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-1878
Published: 2021-09-08
Description: An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. An attacker in a privileged network position may be able to leak sensitive user information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212327
CVE: CVE-2021-1880
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212324; https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1881
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1882
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1883
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted server messages may lead to heap corruption.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1884
Published: 2021-09-08
Description: A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. A remote attacker may be able to cause a denial of service.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-1885
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-21996
Published: 2021-09-08
Description: An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
CVSS Score: 7.5 (HIGH)
References: https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html; https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
CVE: CVE-2021-22004
Published: 2021-09-08
Description: An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
CVE: CVE-2021-30652
Published: 2021-09-08
Description: A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-30653
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-30654
Published: 2021-09-08
Description: This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212299; https://support.apple.com/en-us/HT212299
CVE: CVE-2021-30655
Published: 2021-09-08
Description: An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. The issue was addressed with improved permissions logic.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-30656
Published: 2021-09-08
Description: An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-30657
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212326; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-30658
Published: 2021-09-08
Description: This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Big Sur 11.3. A malicious application may bypass Gatekeeper checks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-494
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-30659
Published: 2021-09-08
Description: A validation issue was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. A malicious application may be able to leak sensitive user information.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212324; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-30660
Published: 2021-09-08
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to disclose kernel memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-30661
Published: 2021-09-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212318; https://support.apple.com/en-us/HT212323
CVE: CVE-2021-30662
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution.
CVSS Score: 7.3 (HIGH)
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-30663
Published: 2021-09-08
Description: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://support.apple.com/en-us/HT212335; https://support.apple.com/en-us/HT212336; https://support.apple.com/en-us/HT212341
CVE: CVE-2021-30664
Published: 2021-09-08
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212323; https://support.apple.com/en-us/HT212324
CVE: CVE-2021-30665
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT212335; https://support.apple.com/en-us/HT212336; https://support.apple.com/en-us/HT212339
CVE: CVE-2021-30666
Published: 2021-09-08
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://support.apple.com/en-us/HT212341; https://support.apple.com/en-us/HT212341; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30666
CVE: CVE-2021-30667
Published: 2021-09-08
Description: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.6 and iPadOS 14.6. An attacker in WiFi range may be able to force a client to use a less secure authentication mechanism.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212528
CVE: CVE-2021-30668
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A person with physical access to a Mac may be able to bypass Login Window during a software update.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212529
CVE: CVE-2021-30669
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application may bypass Gatekeeper checks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-494
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30671
Published: 2021-09-08
Description: A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to send unauthorized Apple events to Finder.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212529
CVE: CVE-2021-30672
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212600; https://support.apple.com/en-us/HT212603
CVE: CVE-2021-30673
Published: 2021-09-08
Description: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to access a user's call history.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212529
CVE: CVE-2021-30674
Published: 2021-09-08
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.6 and iPadOS 14.6. A malicious application may disclose restricted memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212528
CVE: CVE-2021-30675
Published: 2021-09-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in Boot Camp 6.1.14. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212517; https://support.apple.com/en-us/HT212517
CVE: CVE-2021-30676
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.1 (HIGH)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30677
Published: 2021-09-08
Description: This issue was addressed with improved environment sanitization. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to break out of its sandbox.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-30678
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30679
Published: 2021-09-08
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530; https://support.apple.com/en-us/HT212531
CVE: CVE-2021-30680
Published: 2021-09-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4. A local user may be able to load unsigned kernel extensions.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212529
CVE: CVE-2021-30681
Published: 2021-09-08
Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212530
CVE: CVE-2021-30682
Published: 2021-09-08
Description: A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532