Apple Macos Big Sur vulnerabilities

CVE-2021-30828 [MEDIUM] CVE-2021-30828: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30828 Component: CUPS Impact: A local user may be able to read arbitrary files as root Description: This issue was addressed with improved checks.

CVE-2021-30813 [MEDIUM] CVE-2021-30813: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30813 Component: Login Window Impact: A person with access to a host Mac may be able to bypass the Login Window in Remote Desktop for a locked instance of macOS Description: A logic issue was addressed with improved checks.

CVE-2021-30855 [MEDIUM] CVE-2021-30855: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30855 Component: Preferences Impact: An application may be able to access restricted files Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2021-30845 [MEDIUM] CVE-2021-30845: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30845 Component: SMB Impact: A local user may be able to read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2021-30853 [MEDIUM] CVE-2021-30853: macOS Big Sur 11.6 Apple Security Update: About the security content of macOS Big Sur 11.6 Product: macOS Big Sur Version: 11.6 CVE: CVE-2021-30853 Component: Gatekeeper Impact: A malicious application may bypass Gatekeeper checks Description: This issue was addressed with improved checks.

CVE-2021-30807 [HIGH] CVE-2021-30807: macOS Big Sur 11.5.1 Apple Security Update: About the security content of macOS Big Sur 11.5.1 Product: macOS Big Sur Version: 11.5.1 CVE: CVE-2021-30807 Component: IOMobileFrameBuffer Impact: An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: A memory corruption issue was addressed with improved memory handling.

CVE-2021-30678 [CRITICAL] CVE-2021-30678: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30678 Component: AMD Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: A logic issue was addressed with improved state management.

CVE-2020-36230 [HIGH] CVE-2020-36230: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2020-36230 Component: CVE-2020-36230

CVE-2021-30713 [HIGH] CVE-2021-30713: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30713 Component: TCC Impact: A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited. Description: A permissions issue was addressed with improved validation.

CVE-2021-30725 [HIGH] CVE-2021-30725: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30725 Component: Model I/O Impact: Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution Description: A memory corruption issue was addressed with improved state management.

CVE-2020-36227 [HIGH] CVE-2020-36227: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2020-36227 Component: CVE-2020-36227

CVE-2021-30771 [HIGH] CVE-2021-30771: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30771 Component: FontParser Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation.

CVE-2020-36226 [HIGH] CVE-2020-36226: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2020-36226 Component: CVE-2020-36226

CVE-2020-36224 [HIGH] CVE-2020-36224: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2020-36224 Component: CVE-2020-36224

CVE-2020-36222 [HIGH] CVE-2020-36222: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2020-36222 Component: CVE-2020-36222

CVE-2021-30693 [HIGH] CVE-2021-30693: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30693 Component: Model I/O Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: A validation issue was addressed with improved logic.

CVE-2021-30728 [HIGH] CVE-2021-30728: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30728 Component: Intel Graphics Driver Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2021-30698 [HIGH] CVE-2021-30698: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30698 Component: WebRTC Impact: A remote attacker may be able to cause a denial of service Description: A null pointer dereference was addressed with improved input validation.

CVE-2021-21779 [HIGH] CVE-2021-21779: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-21779 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management.

CVE-2021-30681 [HIGH] CVE-2021-30681: macOS Big Sur 11.4 Apple Security Update: About the security content of macOS Big Sur 11.4 Product: macOS Big Sur Version: 11.4 CVE: CVE-2021-30681 Component: Core Services Impact: A malicious application may be able to gain root privileges Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.