stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2021-1653 (severity: HIGH, weakness: CWE-269)
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1654 (severity: HIGH, weakness: CWE-269)
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1655 (severity: HIGH, weakness: CWE-269)
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1656 (severity: MEDIUM, weakness: NVD-CWE-Other)
TPM Device Driver Information Disclosure Vulnerability
CVE-2021-1657 (severity: HIGH, weakness: CWE-269)
Windows Fax Compose Form Remote Code Execution Vulnerability
CVE-2021-1658 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1659 (severity: HIGH, weakness: CWE-269)
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1660 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1661 (severity: HIGH, weakness: CWE-665)
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-1662 (severity: HIGH, weakness: CWE-269)
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-1663 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
CVE-2021-1664 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1665 (severity: HIGH, weakness: NVD-CWE-Other)
GDI+ Remote Code Execution Vulnerability
CVE-2021-1666 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1667 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1668 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability
CVE-2021-1669 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2021-1670 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
CVE-2021-1671 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1672 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
CVE-2021-1673 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1674 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
CVE-2021-1675 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Remote Code Execution Vulnerability
CVE-2021-1676 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
CVE-2021-1677 (severity: MEDIUM, weakness: CWE-290)
Azure Active Directory Pod Identity Spoofing Vulnerability
CVE-2021-1678 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Spoofing Vulnerability
CVE-2021-1679 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows CryptoAPI Denial of Service Vulnerability
CVE-2021-1680 (severity: HIGH, weakness: CWE-269)
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-1681 (severity: HIGH, weakness: CWE-269)
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-1682 (severity: HIGH, weakness: CWE-269)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-1683 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft is aware of the &quot;Impersonation in the Passkey Entry Protocol&quot; vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the remote device exchanges a public key with the same X coordinate as the locally exchanged public key
CVE-2021-1684 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft is aware of the &quot;Impersonation in the Passkey Entry Protocol&quot; vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the remote device exchanges a public key with the same X coordinate as the locally exchanged public key
CVE-2021-1685 (severity: HIGH, weakness: CWE-269)
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
CVE-2021-1686 (severity: HIGH, weakness: CWE-269)
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-1687 (severity: HIGH, weakness: CWE-269)
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-1688 (severity: HIGH, weakness: CWE-269)
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1689 (severity: HIGH, weakness: CWE-269)
Windows Multipoint Management Elevation of Privilege Vulnerability
CVE-2021-1690 (severity: HIGH, weakness: CWE-269)
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-1691 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Denial of Service Vulnerability
CVE-2021-1692 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Denial of Service Vulnerability
CVE-2021-1693 (severity: HIGH, weakness: CWE-269)
Windows CSC Service Elevation of Privilege Vulnerability
CVE-2021-1694 (severity: CRITICAL, weakness: CWE-269)
Windows Update Stack Elevation of Privilege Vulnerability
CVE-2021-1695 (severity: HIGH, weakness: CWE-269)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-1696 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Graphics Component Information Disclosure Vulnerability
CVE-2021-1697 (severity: HIGH, weakness: CWE-269)
Windows InstallService Elevation of Privilege Vulnerability
CVE-2021-1698 (severity: HIGH, weakness: CWE-269)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-1699 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows (modem.sys) Information Disclosure Vulnerability
CVE-2021-1700 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1701 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2021-1702 (severity: HIGH, weakness: CWE-269)
Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability
CVE-2021-1703 (severity: HIGH, weakness: CWE-269)
Windows Event Logging Service Elevation of Privilege Vulnerability
CVE-2021-1704 (severity: HIGH, weakness: CWE-269)
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2021-1705 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
CVE-2021-1706 (severity: HIGH, weakness: CWE-269)
Windows LUAFV Elevation of Privilege Vulnerability
CVE-2021-1707 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-1708 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows GDI+ Information Disclosure Vulnerability
CVE-2021-1709 (severity: HIGH, weakness: CWE-269)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-1710 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-1711 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Remote Code Execution Vulnerability
CVE-2021-1712 (severity: HIGH, weakness: CWE-269)
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2021-1713 (severity: HIGH, weakness: CWE-119)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-1714 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-1715 (severity: HIGH, weakness: CWE-787)
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-1716 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-1717 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-1718 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Tampering Vulnerability
CVE-2021-1719 (severity: HIGH, weakness: CWE-269)
Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2021-1721 (severity: MEDIUM, weakness: NVD-CWE-Other)
.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-1722 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Fax Service Remote Code Execution Vulnerability
CVE-2021-1723 (severity: HIGH, weakness: NVD-CWE-Other)
ASP.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2021-1724 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-1725 (severity: MEDIUM, weakness: CWE-287)
Bot Framework SDK Information Disclosure Vulnerability
CVE-2021-1726 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-1727 (severity: HIGH, weakness: CWE-269)
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-1728 (severity: HIGH, weakness: CWE-269)
System Center Operations Manager Elevation of Privilege Vulnerability
CVE-2021-1729 (severity: HIGH, weakness: CWE-269)
Windows Update Stack Setup Elevation of Privilege Vulnerability
CVE-2021-1730 (severity: MEDIUM, weakness: NVD-CWE-Other)
<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p> <p>This update addresses this vulnerability.</p> <p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.</p>
CVE-2021-1731 (severity: MEDIUM, weakness: CWE-522)
PFX Encryption Security Feature Bypass Vulnerability
CVE-2021-1732 (severity: HIGH, weakness: CWE-787)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-1733 (severity: HIGH, weakness: CWE-269)
Sysinternals PsExec Elevation of Privilege Vulnerability
CVE-2021-1734 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Procedure Call Information Disclosure Vulnerability
CVE-2021-1736 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1737 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1738 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1739 (severity: MEDIUM, weakness: CWE-22)
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.
CVE-2021-1740 (severity: MEDIUM, weakness: CWE-22)
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.
CVE-2021-1741 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1742 (severity: HIGH, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1743 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1744 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1745 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVE-2021-1746 (severity: HIGH, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1747 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing maliciously crafted web content may lead to code execution.
CVE-2021-1748 (severity: HIGH, weakness: CWE-20)
A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.
CVE-2021-1750 (severity: HIGH, weakness: CWE-269)
Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. An application may be able to execute arbitrary code with kernel privileges.
CVE-2021-1751 (severity: HIGH, weakness: NVD-CWE-Other)
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.
CVE-2021-1753 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1754 (severity: HIGH, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1755 (severity: LOW, weakness: CWE-862)
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVE-2021-1756 (severity: LOW, weakness: NVD-CWE-Other)
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker with physical access to a device may be able to see private contact information.
CVE-2021-1757 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges.
CVE-2021-1758 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.
CVE-2021-1759 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1760 (severity: MEDIUM, weakness: CWE-787)
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application could execute arbitrary code leading to compromise of user information.
CVE-2021-1761 (severity: HIGH, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause a denial of service.
CVE-2021-1762 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVE-2021-1763 (severity: HIGH, weakness: CWE-120)
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVE-2021-1764 (severity: HIGH, weakness: CWE-416)
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause a denial of service.
CVE-2021-1765 (severity: MEDIUM, weakness: NVD-CWE-Other)
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy.
CVE-2021-1766 (severity: MEDIUM, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.
CVE-2021-1767 (severity: HIGH, weakness: CWE-787)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to heap corruption.
CVE-2021-1768 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVE-2021-1769 (severity: MEDIUM, weakness: NVD-CWE-Other)
A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
CVE-2021-1770 (severity: CRITICAL, weakness: CWE-119)
A buffer overflow may result in arbitrary code execution. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A logic issue was addressed with improved state management.
CVE-2021-1771 (severity: LOW, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group.
CVE-2021-1772 (severity: HIGH, weakness: CWE-787)
A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted text file may lead to arbitrary code execution.
CVE-2021-1773 (severity: MEDIUM, weakness: NVD-CWE-Other)
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.
CVE-2021-1774 (severity: HIGH, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1775 (severity: HIGH, weakness: NVD-CWE-Other)
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution.
CVE-2021-1776 (severity: HIGH, weakness: CWE-787)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVE-2021-1777 (severity: HIGH, weakness: NVD-CWE-Other)
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2021-1778 (severity: MEDIUM, weakness: CWE-125)
An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.