Advisories · Technology

Apple iOS and iPadOS.

Every CVE that names Apple iOS and iPadOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-30907 CVE record

An integer overflow was addressed through improved input validation.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30906 CVE record

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30905 CVE record

An out-of-bounds read was addressed with improved bounds checking.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30903 CVE record

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30902 CVE record

A use after free issue was addressed with improved memory management.
- Apple iOS and iPadOS
Not analysed yet 24 Aug 2021
CVE-2021-30900 CVE record

CVSS 7.8 HighCritical · KEVKEV

Out-of-bounds write in Apple iOS and iPadOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 24 Aug 2021
CVE-2021-30898 CVE record

An access issue was addressed with additional sandbox restrictions on third party applications.
- Apple iOS and iPadOS
Not analysed yet 24 Aug 2021
CVE-2021-30896 CVE record

A logic issue was addressed with improved restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30895 CVE record

A logic issue was addressed with improved restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30894 CVE record

A memory corruption issue was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 24 Aug 2021
CVE-2021-30890 CVE record

A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30889 CVE record

A buffer overflow issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30888 CVE record

An information leakage issue was addressed.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30887 CVE record

A logic issue was addressed with improved restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30886 CVE record

A use after free issue was addressed with improved memory management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30884 CVE record

The issue was resolved with additional restrictions on CSS compositing.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 24 Aug 2021
CVE-2021-30883 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Out-of-bounds write in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 24 Aug 2021
CVE-2021-30882 CVE record

A logic issue was addressed with improved validation.
- Apple iOS and iPadOS
- Apple watchOS
Not analysed yet 24 Aug 2021
CVE-2021-30881 CVE record

An input validation issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 24 Aug 2021
CVE-2021-30875 CVE record

A lock screen issue allowed access to contacts on a locked device.
- Apple iOS and iPadOS
Not analysed yet 24 Aug 2021
CVE-2021-30874 CVE record

An authorization issue was addressed with improved state management.
- Apple iOS and iPadOS
Not analysed yet 24 Aug 2021
CVE-2021-30870 CVE record

A logic issue existed in the handling of document loads.
- Apple iOS and iPadOS
Not analysed yet 24 Aug 2021
CVE-2021-30869 CVE record

CVSS 7.8 HighCritical · KEVKEV

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 24 Aug 2021
CVE-2021-30867 CVE record

The issue was addressed with improved authentication.
- Apple iOS and iPadOS
Not analysed yet 24 Aug 2021
CVE-2021-30866 CVE record

A user privacy issue was addressed by removing the broadcast MAC address.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 24 Aug 2021
CVE-2021-30863 CVE record

This issue was addressed by improving Face ID anti-spoofing models.
- Apple iOS and iPadOS
Not analysed yet 24 Aug 2021
CVE-2021-30854 CVE record

A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 24 Aug 2021
CVE-2021-30852 CVE record

A type confusion issue was addressed with improved memory handling.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 24 Aug 2021
CVE-2021-30851 CVE record

A memory corruption vulnerability was addressed with improved locking.
- Apple iOS and iPadOS
- Apple tvOS
Not analysed yet 24 Aug 2021
CVE-2021-1753 CVE record

An out-of-bounds read was addressed with improved bounds checking.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1761 CVE record

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1818 CVE record

A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1879 CVE record

CVSS 6.1 MediumCritical · KEVKEV

Cross-site scripting in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple iOS
- Cross-site scripting (XSS)
Not analysed yet 2 Apr 2021
CVE-2021-1871 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+KEV

A logic issue was addressed with improved restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1870 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+KEV

A logic issue was addressed with improved restrictions.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1801 CVE record

This issue was addressed with improved iframe sandbox enforcement.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1799 CVE record

A port redirection issue was addressed with additional port validation.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1797 CVE record

The issue was addressed with improved permissions logic.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1796 CVE record

An out-of-bounds write was addressed with improved input validation.
- Apple iOS and iPadOS
Not analysed yet 2 Apr 2021
CVE-2021-1793 CVE record

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1795 CVE record

An out-of-bounds write was addressed with improved input validation.
- Apple iOS and iPadOS
Not analysed yet 2 Apr 2021
CVE-2021-1794 CVE record

An out-of-bounds read was addressed with improved input validation.
- Apple iOS and iPadOS
Not analysed yet 2 Apr 2021
CVE-2021-1791 CVE record

An out-of-bounds read issue existed that led to the disclosure of kernel memory.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1789 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Type confusion in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Memory corruption
Not analysed yet 2 Apr 2021
CVE-2021-1792 CVE record

An out-of-bounds read was addressed with improved bounds checking.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1788 CVE record

A use after free issue was addressed with improved memory management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1787 CVE record

Multiple issues were addressed with improved logic.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1785 CVE record

An out-of-bounds read was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1783 CVE record

An access issue was addressed with improved memory management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1786 CVE record

A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1782 CVE record

CVSS 7.0 HighCritical · KEVKEV

A race condition was addressed with improved locking.
- Apple iOS and iPadOS
- Apple macOS
- CWE-667
Not analysed yet 2 Apr 2021
CVE-2021-1781 CVE record

A privacy issue existed in the handling of Contact cards.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1777 CVE record

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1778 CVE record

An out-of-bounds read issue existed in the curl.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1780 CVE record

A memory initialization issue was addressed with improved memory handling.
- Apple iOS and iPadOS
Not analysed yet 2 Apr 2021
CVE-2021-1773 CVE record

A logic issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1776 CVE record

An out-of-bounds write issue was addressed with improved bounds checking.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1774 CVE record

This issue was addressed with improved checks.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1772 CVE record

A stack overflow was addressed with improved input validation.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021
CVE-2021-1769 CVE record

A logic issue was addressed with improved validation.
- Apple iOS and iPadOS
- Apple macOS
Not analysed yet 2 Apr 2021