VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Sep 8, 2021· Updated Jun 17, 2026

CVE-2021-1740

CVE-2021-1740

Description

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

25
  • Apple Inc./Ipados2 versions
    cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <14.5
    • (no CPE)range: 14.5
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <14.5
  • Apple Inc./Mac OS X11 versions
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*range: >=10.15,<=10.15.5
    • cpe:2.3:o:apple:mac_os_x:10.15.6:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.6:supplemental_update:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
  • Apple Inc./macOS3 versions
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=11.0,<11.3
    • (no CPE)range: Big Sur 11.3
    • (no CPE)range: unspecified
  • Apple Inc./tvOS3 versions
    cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <14.5
    • (no CPE)range: 14.5
    • (no CPE)range: unspecified
  • Apple Inc./watchOS3 versions
    cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <7.4
    • (no CPE)range: 7.4
    • (no CPE)range: unspecified
  • Apple Inc./iOSllm-fuzzy
    Range: 14.5
  • Apple Inc./iOS and iPadOScpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.