CVE-2021-30860 is an integer overflow vulnerability in Apple CoreGraphics affecting iOS, iPadOS, macOS, and watchOS. This flaw may allow code execution when processing a maliciously crafted PDF file. It is also known as FORCEDENTRY and has been exploited in the wild. The vulnerability is rated as high severity due to its potential impact. No specific affected versions or patch information is provided in the input data.
A memory corruption vulnerability exists in the FontParser component of multiple Apple products including iOS, iPadOS, macOS, and watchOS. This flaw may allow an attacker to execute arbitrary code when processing a maliciously crafted font. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
A memory corruption vulnerability exists in Apple iOS, iPadOS, macOS, and watchOS within the IOMobileFrameBuffer component. This flaw may allow an application to execute code with kernel privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
A memory initialization vulnerability exists in multiple Apple products including iOS, iPadOS, macOS, and watchOS. This flaw may allow a malicious application to disclose kernel memory, potentially exposing sensitive information. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
A type confusion vulnerability exists in multiple Apple products including iOS, iPadOS, macOS, and watchOS. This flaw may allow a malicious application to execute code with kernel privileges, potentially leading to significant system compromise. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2020-9818 is an out-of-bounds write vulnerability in the Mail app on Apple iOS, iPadOS, and watchOS. This flaw may allow memory modification or cause the application to terminate when processing a specially crafted email message. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
A memory corruption vulnerability exists in the Mail app on Apple iOS, iPadOS, and watchOS. This flaw may allow heap corruption when processing a specially crafted email message. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-30762 is a use-after-free vulnerability in Apple iOS WebKit that can lead to code execution when processing maliciously crafted web content. This affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
A race condition vulnerability exists in multiple Apple operating systems including iOS, iPadOS, macOS, watchOS, and tvOS. This flaw may allow a malicious application to elevate its privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2021-1870 is a high-severity remote code execution vulnerability in Apple iOS, iPadOS, and macOS WebKit. It involves an unspecified logic flaw that allows remote attackers to execute arbitrary code via crafted web content. This affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit for HTML processing. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-1871 is a high-severity remote code execution vulnerability in Apple iOS, iPadOS, and macOS WebKit. It involves an unspecified logic flaw that allows remote attackers to execute arbitrary code via HTML parsing. This affects Apple Safari and other products using WebKit for HTML processing. Exploits have been observed in the wild. No specific affected versions or patch status are provided.
CVE-2021-1879 is a high-severity cross-site scripting (XSS) vulnerability in Apple iOS, iPadOS, and watchOS WebKit. It allows universal XSS when processing maliciously crafted web content, potentially affecting HTML parsers that use WebKit, including Apple Safari and other products relying on WebKit. Exploits have been observed in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2021-30661 is a use-after-free vulnerability in WebKit Storage affecting multiple Apple products including iOS, iPadOS, macOS, tvOS, watchOS, and Safari. The flaw allows code execution when processing maliciously crafted web content. It also potentially affects other products using WebKit for HTML parsing. Exploitation in the wild has been observed. No explicit patch information is provided in the input data.
CVE-2021-30666 is a buffer overflow vulnerability in Apple iOS WebKit that allows code execution when processing maliciously crafted web content. It affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
An unspecified permissions issue exists in Apple macOS Transparency, Consent, and Control (TCC) that may allow a malicious application to bypass privacy preferences. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2021-30657 is an unspecified logic vulnerability in Apple macOS System Preferences that can allow a malicious application to bypass Gatekeeper security checks. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
A memory corruption vulnerability exists in WebKit used by multiple Apple products including iOS, iPadOS, macOS, watchOS, and tvOS. This flaw can lead to code execution when processing maliciously crafted web content. The vulnerability affects HTML parsers relying on WebKit, including Apple Safari and other products using WebKit. Exploitation in the wild has been observed. No specific affected versions or patch details are provided in the input data.
An integer overflow vulnerability exists in Apple WebKit used by iOS, iPadOS, macOS, tvOS, and Safari. This flaw allows code execution when processing specially crafted web content. The vulnerability affects HTML parsers relying on WebKit, including Apple Safari and potentially other products using WebKit. Exploitation in the wild has been confirmed. No explicit affected versions or patch information is provided.
CVE-2021-30761 is a memory corruption vulnerability in Apple iOS WebKit that can lead to code execution when processing maliciously crafted web content. This affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. The vulnerability has been exploited in the wild.
CVE-2021-30869 is a type confusion vulnerability in the XNU kernel affecting Apple iOS, iPadOS, and macOS. This flaw may allow a malicious application to execute code with kernel privileges. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the input data.