Vendor CVEs

Apple Inc.

All CVEs

8,451 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-26746	Apple Inc. macOS	Med	0.36	5.5	0.01	May 26, 2022	This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.
CVE-2022-26745	Apple Inc. macOS Big Sur	Med	0.36	5.5	0.01	May 26, 2022	A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malicious application may disclose restricted memory.
CVE-2022-26728	Apple Inc. macOS	Med	0.36	5.5	0.01	May 26, 2022	This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to access restricted files.
CVE-2022-26727	Apple Inc. macOS	Med	0.36	5.5	0.01	May 26, 2022	This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system.
CVE-2022-26724	Apple Inc. tvOS	Med	0.36	5.5	0.00	May 26, 2022	An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15.5. A local user may be able to enable iCloud Photos without authentication.
CVE-2022-26712	Apple Inc. macOS	Med	0.36	5.5	0.01	May 26, 2022	This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to modify protected parts of the file system.
CVE-2022-26706	Apple Inc. tvOS	Med	0.36	5.5	0.07	May 26, 2022	An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2022-22676	Apple Inc. macOS Monterey	Med	0.36	5.5	0.01	May 26, 2022	An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission.
CVE-2022-22663	Apple Inc. Ipados	Med	0.36	5.5	0.01	May 26, 2022	This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.6. A malicious application may bypass Gatekeeper checks.
CVE-2020-13495	Pixar OpenUSD	Med	0.36	5.5	0.01	Apr 18, 2022	An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability…
CVE-2022-22660	Apple Inc. macOS Monterey	Med	0.36	5.5	0.01	Mar 18, 2022	This issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An app may be able to spoof system notifications and UI.
CVE-2022-22650	Apple Inc. macOS Monterey	Med	0.36	5.5	0.00	Mar 18, 2022	This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data.
CVE-2022-22648	Apple Inc. macOS Monterey	Med	0.36	5.5	0.00	Mar 18, 2022	This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to read restricted memory.
CVE-2022-22644	Apple Inc. macOS Monterey	Med	0.36	5.5	0.01	Mar 18, 2022	A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts.
CVE-2022-22600	Apple Inc. tvOS	Med	0.36	5.5	0.02	Mar 18, 2022	The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences.
CVE-2022-22583	Apple Inc. macOS	Med	0.36	5.5	0.02	Mar 18, 2022	A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access restricted files.
CVE-2021-30767	Apple Inc. macOS Monterey	Med	0.36	5.5	0.00	Dec 23, 2021	A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A local user may be able to modify protected parts of the file system.
CVE-2020-3896	Apple Inc. macOS Catalina	Med	0.36	5.5	0.01	Dec 23, 2021	This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to overwrite arbitrary files.
CVE-2019-8702	Apple Inc. macOS	Med	0.36	5.5	0.00	Dec 23, 2021	This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra, iOS 12.4, tvOS 12.4. A local user may be able to read a persistent account identifier.
CVE-2017-13910	Apple Inc. macOS High Sierra	Med	0.36	5.5	0.00	Dec 23, 2021	An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able to access restricted files.
CVE-2017-13909	Apple Inc. macOS High Sierra	Med	0.36	5.5	0.00	Dec 23, 2021	An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This issue is fixed in macOS High Sierra 10.13. A local attacker may gain access to iCloud authentication tokens.
CVE-2021-30836	Apple Inc. tvOS	Med	0.36	5.5	0.01	Oct 28, 2021	An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.
CVE-2021-30831	Apple Inc. tvOS	Med	0.36	5.5	0.01	Oct 28, 2021	An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory.
CVE-2021-30817	Apple Inc. macOS Big Sur	Med	0.36	5.5	0.01	Oct 28, 2021	A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access data about the accounts the user is using Family Sharing with.
CVE-2021-30808	Apple Inc. tvOS	Med	0.36	5.5	0.01	Oct 28, 2021	This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A malicious application may be able to modify protected parts of the file system.
CVE-2020-29629	Apple Inc. macOS Big Sur	Med	0.36	5.5	0.01	Oct 28, 2021	An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read restricted memory.
CVE-2021-30850	Apple Inc. macOS	Med	0.36	5.5	0.01	Oct 19, 2021	An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6, tvOS 15. A user may gain access to protected parts of the file system.
CVE-2021-30845	Apple Inc. macOS Big Sur	Med	0.36	5.5	0.00	Oct 19, 2021	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local user may be able to read kernel memory.
CVE-2021-30828	Apple Inc. macOS	Med	0.36	5.5	0.00	Oct 19, 2021	This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local user may be able to read arbitrary files as root.
CVE-2021-30819	Apple Inc. Ipados	Med	0.36	5.5	0.01	Oct 19, 2021	An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Processing a maliciously crafted USD file may disclose memory contents.
CVE-2021-30811	Apple Inc. Ipados	Med	0.36	5.5	0.00	Oct 19, 2021	This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker may be able to read sensitive information.
CVE-2021-30709	Apple Inc. Ipados	Med	0.36	5.5	0.01	Sep 8, 2021	This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVE-2021-30706	Apple Inc. tvOS	Med	0.36	5.5	0.01	Sep 8, 2021	Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. This issue was addressed with improved checks.
CVE-2021-30705	Apple Inc. tvOS	Med	0.36	5.5	0.01	Sep 8, 2021	This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted ASTC file may disclose memory contents.
CVE-2021-30700	Apple Inc. Ipados	Med	0.36	5.5	0.01	Sep 8, 2021	This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted image may lead to disclosure of user information.
CVE-2021-30697	Apple Inc. tvOS	Med	0.36	5.5	0.00	Sep 8, 2021	A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local user may be able to leak sensitive user…
CVE-2021-30695	Apple Inc. macOS	Med	0.36	5.5	0.01	Sep 8, 2021	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVE-2021-30694	Apple Inc. Ipados	Med	0.36	5.5	0.01	Sep 8, 2021	An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory…
CVE-2021-30692	Apple Inc. macOS	Med	0.36	5.5	0.01	Sep 8, 2021	An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory…
CVE-2021-30691	Apple Inc. macOS	Med	0.36	5.5	0.01	Sep 8, 2021	An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory…
CVE-2021-30687	Apple Inc. macOS	Med	0.36	5.5	0.01	Sep 8, 2021	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to…
CVE-2021-30686	Apple Inc. macOS	Med	0.36	5.5	0.01	Sep 8, 2021	An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted audio file may disclose restricted memory.
CVE-2021-30685	Apple Inc. macOS	Med	0.36	5.5	0.01	Sep 8, 2021	This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Parsing a maliciously crafted audio file may lead to disclosure of user information.
CVE-2021-30682	Apple Inc. Safari	Med	0.36	5.5	0.02	Sep 8, 2021	A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information.
CVE-2021-30674	Apple Inc. Ipados	Med	0.36	5.5	0.01	Sep 8, 2021	This issue was addressed with improved checks. This issue is fixed in iOS 14.6 and iPadOS 14.6. A malicious application may disclose restricted memory.
CVE-2021-30673	Apple Inc. macOS Big Sur	Med	0.36	5.5	0.01	Sep 8, 2021	An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to access a user's call history.
CVE-2021-30669	Apple Inc. macOS	Med	0.36	5.5	0.00	Sep 8, 2021	A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application may bypass Gatekeeper checks.
CVE-2021-30658	Apple Inc. macOS Big Sur	Med	0.36	5.5	0.00	Sep 8, 2021	This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Big Sur 11.3. A malicious application may bypass Gatekeeper checks.
CVE-2021-30656	Apple Inc. Ipados	Med	0.36	5.5	0.01	Sep 8, 2021	An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout.
CVE-2021-30654	Apple Inc. Garageband	Med	0.36	5.5	0.00	Sep 8, 2021	This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information.

CVE-2022-26746MedMay 26, 2022
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.
CVE-2022-26745MedMay 26, 2022
Apple Inc.
macOS Big Sur
risk 0.36cvss 5.5epss 0.01
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.6. A malicious application may disclose restricted memory.
CVE-2022-26728MedMay 26, 2022
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to access restricted files.
CVE-2022-26727MedMay 26, 2022
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system.
CVE-2022-26724MedMay 26, 2022
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.00
An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15.5. A local user may be able to enable iCloud Photos without authentication.
CVE-2022-26712MedMay 26, 2022
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to modify protected parts of the file system.
CVE-2022-26706MedMay 26, 2022
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.07
An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2022-22676MedMay 26, 2022
Apple Inc.
macOS Monterey
risk 0.36cvss 5.5epss 0.01
An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission.
CVE-2022-22663MedMay 26, 2022
Apple Inc.
Ipados
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.6. A malicious application may bypass Gatekeeper checks.
CVE-2020-13495MedApr 18, 2022
Pixar
OpenUSD
risk 0.36cvss 5.5epss 0.01
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability…
CVE-2022-22660MedMar 18, 2022
Apple Inc.
macOS Monterey
risk 0.36cvss 5.5epss 0.01
This issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An app may be able to spoof system notifications and UI.
CVE-2022-22650MedMar 18, 2022
Apple Inc.
macOS Monterey
risk 0.36cvss 5.5epss 0.00
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data.
CVE-2022-22648MedMar 18, 2022
Apple Inc.
macOS Monterey
risk 0.36cvss 5.5epss 0.00
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to read restricted memory.
CVE-2022-22644MedMar 18, 2022
Apple Inc.
macOS Monterey
risk 0.36cvss 5.5epss 0.01
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts.
CVE-2022-22600MedMar 18, 2022
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.02
The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences.
CVE-2022-22583MedMar 18, 2022
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.02
A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access restricted files.
CVE-2021-30767MedDec 23, 2021
Apple Inc.
macOS Monterey
risk 0.36cvss 5.5epss 0.00
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A local user may be able to modify protected parts of the file system.
CVE-2020-3896MedDec 23, 2021
Apple Inc.
macOS Catalina
risk 0.36cvss 5.5epss 0.01
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to overwrite arbitrary files.
CVE-2019-8702MedDec 23, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.00
This issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra, iOS 12.4, tvOS 12.4. A local user may be able to read a persistent account identifier.
CVE-2017-13910MedDec 23, 2021
Apple Inc.
macOS High Sierra
risk 0.36cvss 5.5epss 0.00
An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able to access restricted files.
CVE-2017-13909MedDec 23, 2021
Apple Inc.
macOS High Sierra
risk 0.36cvss 5.5epss 0.00
An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This issue is fixed in macOS High Sierra 10.13. A local attacker may gain access to iCloud authentication tokens.
CVE-2021-30836MedOct 28, 2021
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.
CVE-2021-30831MedOct 28, 2021
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory.
CVE-2021-30817MedOct 28, 2021
Apple Inc.
macOS Big Sur
risk 0.36cvss 5.5epss 0.01
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access data about the accounts the user is using Family Sharing with.
CVE-2021-30808MedOct 28, 2021
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved checks. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A malicious application may be able to modify protected parts of the file system.
CVE-2020-29629MedOct 28, 2021
Apple Inc.
macOS Big Sur
risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read restricted memory.
CVE-2021-30850MedOct 19, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6, tvOS 15. A user may gain access to protected parts of the file system.
CVE-2021-30845MedOct 19, 2021
Apple Inc.
macOS Big Sur
risk 0.36cvss 5.5epss 0.00
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local user may be able to read kernel memory.
CVE-2021-30828MedOct 19, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.00
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local user may be able to read arbitrary files as root.
CVE-2021-30819MedOct 19, 2021
Apple Inc.
Ipados
risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Processing a maliciously crafted USD file may disclose memory contents.
CVE-2021-30811MedOct 19, 2021
Apple Inc.
Ipados
risk 0.36cvss 5.5epss 0.00
This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker may be able to read sensitive information.
CVE-2021-30709MedSep 8, 2021
Apple Inc.
Ipados
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVE-2021-30706MedSep 8, 2021
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.01
Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. This issue was addressed with improved checks.
CVE-2021-30705MedSep 8, 2021
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted ASTC file may disclose memory contents.
CVE-2021-30700MedSep 8, 2021
Apple Inc.
Ipados
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted image may lead to disclosure of user information.
CVE-2021-30697MedSep 8, 2021
Apple Inc.
tvOS
risk 0.36cvss 5.5epss 0.00
A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local user may be able to leak sensitive user…
CVE-2021-30695MedSep 8, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.
CVE-2021-30694MedSep 8, 2021
Apple Inc.
Ipados
risk 0.36cvss 5.5epss 0.01
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory…
CVE-2021-30692MedSep 8, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory…
CVE-2021-30691MedSep 8, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory…
CVE-2021-30687MedSep 8, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted image may lead to…
CVE-2021-30686MedSep 8, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted audio file may disclose restricted memory.
CVE-2021-30685MedSep 8, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Parsing a maliciously crafted audio file may lead to disclosure of user information.
CVE-2021-30682MedSep 8, 2021
Apple Inc.
Safari
risk 0.36cvss 5.5epss 0.02
A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious application may be able to leak sensitive user information.
CVE-2021-30674MedSep 8, 2021
Apple Inc.
Ipados
risk 0.36cvss 5.5epss 0.01
This issue was addressed with improved checks. This issue is fixed in iOS 14.6 and iPadOS 14.6. A malicious application may disclose restricted memory.
CVE-2021-30673MedSep 8, 2021
Apple Inc.
macOS Big Sur
risk 0.36cvss 5.5epss 0.01
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to access a user's call history.
CVE-2021-30669MedSep 8, 2021
Apple Inc.
macOS
risk 0.36cvss 5.5epss 0.00
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application may bypass Gatekeeper checks.
CVE-2021-30658MedSep 8, 2021
Apple Inc.
macOS Big Sur
risk 0.36cvss 5.5epss 0.00
This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Big Sur 11.3. A malicious application may bypass Gatekeeper checks.
CVE-2021-30656MedSep 8, 2021
Apple Inc.
Ipados
risk 0.36cvss 5.5epss 0.01
An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout.
CVE-2021-30654MedSep 8, 2021
Apple Inc.
Garageband
risk 0.36cvss 5.5epss 0.00
This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information.

Page 80 of 170