Apple Security Update 2021-005 Catalina vulnerabilities

CVE-2021-30844 [HIGH] CVE-2021-30844: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30844 Component: SMB Impact: A remote attacker may be able to leak memory Description: A logic issue was addressed with improved state management.

CVE-2021-30835 [HIGH] CVE-2021-30835: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30835 Component: ImageIO Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: This issue was addressed with improved checks.

CVE-2021-31010 [HIGH] CVE-2021-31010: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-31010 Component: Core Telephony Impact: A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release. Description: A deserialization issue was addressed through improved validat

CVE-2021-30832 [HIGH] CVE-2021-30832: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30832 Component: CVMS Impact: A local attacker may be able to elevate their privileges Description: A memory corruption issue was addressed with improved state management.

CVE-2021-30842 [HIGH] CVE-2021-30842: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30842 Component: FontParser Impact: Processing a maliciously crafted dfont file may lead to arbitrary code execution Description: This issue was addressed with improved checks.

CVE-2021-30843 [HIGH] CVE-2021-30843: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30843 Component: FontParser Impact: Processing a maliciously crafted dfont file may lead to arbitrary code execution Description: This issue was addressed with improved checks.

CVE-2021-30829 [HIGH] CVE-2021-30829: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30829 Component: CUPS Impact: A local user may be able to execute arbitrary files Description: A URI parsing issue was addressed with improved parsing.

CVE-2021-30859 [HIGH] CVE-2021-30859: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30859 Component: Kernel Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A type confusion issue was addressed with improved state handling.

CVE-2021-30830 [HIGH] CVE-2021-30830: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30830 Component: Kernel Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2021-30713 [HIGH] CVE-2021-30713: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30713 Component: TCC Impact: A malicious application may be able to bypass Privacy preferences Description: A permissions issue was addressed with improved validation.

CVE-2021-30860 [HIGH] CVE-2021-30860: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30860 Component: CoreGraphics Impact: Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: An integer overflow was addressed with improved input validation.

CVE-2021-30827 [HIGH] CVE-2021-30827: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30827 Component: CUPS Impact: A local attacker may be able to elevate their privileges Description: A permissions issue existed. This issue was addressed with improved permission validation.

CVE-2021-30865 [HIGH] CVE-2021-30865: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30865 Component: Kernel Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds read was addressed with improved input validation.

CVE-2021-30857 [HIGH] CVE-2021-30857: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30857 Component: Kernel Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved locking.

CVE-2021-30847 [HIGH] CVE-2021-30847: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30847 Component: ImageIO Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: This issue was addressed with improved checks.

CVE-2021-30841 [HIGH] CVE-2021-30841: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30841 Component: FontParser Impact: Processing a maliciously crafted dfont file may lead to arbitrary code execution Description: This issue was addressed with improved checks.

CVE-2020-29622 [HIGH] CVE-2020-29622: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2020-29622 Component: Kernel Impact: Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges Description: A race condition was addressed with additional validation.

CVE-2021-22925 [MEDIUM] CVE-2021-22925: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-22925 Component: CUPS Impact: A local user may be able to execute arbitrary files Description: A URI parsing issue was addressed with improved parsing.

CVE-2013-0340 [MEDIUM] CVE-2013-0340: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2013-0340 Component: Kernel Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A type confusion issue was addressed with improved state handling.

CVE-2021-30783 [MEDIUM] CVE-2021-30783: Security Update 2021-005 Catalina Apple Security Update: About the security content of Security Update 2021-005 Catalina Product: Security Update 2021-005 Catalina CVE: CVE-2021-30783 Component: CoreServices Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with improved access restrictions.