# CVEs published 2021-08-24

222 CVEs were published on August 24, 2021: 0 critical, 36 high. 8 are now in CISA KEV. Days are UTC.

- [CVE-2021-39156](https://cve.now/CVE-2021-39156.md): Fragments in Path May Lead to Authorization Policy Bypass (CVSS 8.1, istio · istio.io/istio)
- [CVE-2021-39155](https://cve.now/CVE-2021-39155.md): Authorization Policy Bypass Due to Case Insensitive Host Comparison (CVSS 8.3, istio · istio.io/istio)
- [CVE-2021-32780](https://cve.now/CVE-2021-32780.md): Incorrect handling of H/2 GOAWAY followed by SETTINGS frames (CVSS 8.6, envoyproxy envoy)
- [CVE-2021-32781](https://cve.now/CVE-2021-32781.md): Continued processing of requests after locally generated response (CVSS 8.6, envoyproxy envoy)
- [CVE-2021-32779](https://cve.now/CVE-2021-32779.md): Incorrectly handling of URI '#fragment' element as part of the path element (CVSS 8.6, envoyproxy envoy)
- [CVE-2021-32778](https://cve.now/CVE-2021-32778.md): Excessive CPU utilization when closing HTTP/2 streams (CVSS 5.8, envoyproxy envoy)
- [CVE-2021-32777](https://cve.now/CVE-2021-32777.md): Incorrect concatenation of multiple value request headers in ext-authz extension (CVSS 8.6, envoyproxy envoy)
- [CVE-2020-18917](https://cve.now/CVE-2020-18917.md): The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because th (no CVSS)
- [CVE-2020-18913](https://cve.now/CVE-2020-18913.md): EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms\_web/Search.php component via the attr\_array paramet (no CVSS)
- [CVE-2021-39510](https://cve.now/CVE-2021-39510.md): An issue was discovered in D-Link DIR816\_A1\_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function (no CVSS)
- [CVE-2021-39509](https://cve.now/CVE-2021-39509.md): An issue was discovered in D-Link DIR-816 DIR-816A2\_FWv1.10CNB05\_R1B011D88210 The HTTP request parameter is used in the handler function of (no CVSS)
- [CVE-2021-31013](https://cve.now/CVE-2021-31013.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-31010](https://cve.now/CVE-2021-31010.md): A deserialization issue was addressed through improved validation. (CVSS 7.5, KEV, Apple macOS · Apple watchOS)
- [CVE-2021-31009](https://cve.now/CVE-2021-31009.md): Multiple issues were addressed by removing HDF5. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-31008](https://cve.now/CVE-2021-31008.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS +1)
- [CVE-2021-31007](https://cve.now/CVE-2021-31007.md): Description: A permissions issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple watchOS)
- [CVE-2021-31006](https://cve.now/CVE-2021-31006.md): Description: A permissions issue was addressed with improved validation. (no CVSS, Apple macOS · Apple tvOS +1)
- [CVE-2021-31005](https://cve.now/CVE-2021-31005.md): Description: A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-31004](https://cve.now/CVE-2021-31004.md): A race condition was addressed with improved locking. (no CVSS, Apple macOS)
- [CVE-2021-31002](https://cve.now/CVE-2021-31002.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2021-31001](https://cve.now/CVE-2021-31001.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-31000](https://cve.now/CVE-2021-31000.md): A permissions issue was addressed with improved validation. (no CVSS, Apple watchOS)
- [CVE-2021-30999](https://cve.now/CVE-2021-30999.md): The issue was addressed with improved permissions logic. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30998](https://cve.now/CVE-2021-30998.md): A S/MIME issue existed in the handling of encrypted email. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30997](https://cve.now/CVE-2021-30997.md): A S/MIME issue existed in the handling of encrypted email. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30996](https://cve.now/CVE-2021-30996.md): A race condition was addressed with improved state handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30995](https://cve.now/CVE-2021-30995.md): A race condition was addressed with improved state handling. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30994](https://cve.now/CVE-2021-30994.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2021-30993](https://cve.now/CVE-2021-30993.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30992](https://cve.now/CVE-2021-30992.md): This issue was addressed with improved handling of file metadata. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30991](https://cve.now/CVE-2021-30991.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30990](https://cve.now/CVE-2021-30990.md): A logic issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-30987](https://cve.now/CVE-2021-30987.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2021-30988](https://cve.now/CVE-2021-30988.md): Description: A permissions issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30986](https://cve.now/CVE-2021-30986.md): A device configuration issue was addressed with an updated configuration. (no CVSS, Apple macOS)
- [CVE-2021-30985](https://cve.now/CVE-2021-30985.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30984](https://cve.now/CVE-2021-30984.md): A race condition was addressed with improved state handling. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30983](https://cve.now/CVE-2021-30983.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 7.8, KEV, Apple iOS and iPadOS)
- [CVE-2021-30982](https://cve.now/CVE-2021-30982.md): A race condition was addressed with improved locking. (no CVSS, Apple macOS)
- [CVE-2021-30981](https://cve.now/CVE-2021-30981.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30980](https://cve.now/CVE-2021-30980.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30979](https://cve.now/CVE-2021-30979.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30977](https://cve.now/CVE-2021-30977.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30976](https://cve.now/CVE-2021-30976.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30975](https://cve.now/CVE-2021-30975.md): This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. (no CVSS, Apple macOS)
- [CVE-2021-30973](https://cve.now/CVE-2021-30973.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30972](https://cve.now/CVE-2021-30972.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30971](https://cve.now/CVE-2021-30971.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30970](https://cve.now/CVE-2021-30970.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30969](https://cve.now/CVE-2021-30969.md): A path handling issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-30968](https://cve.now/CVE-2021-30968.md): A validation issue related to hard link behavior was addressed with improved sandbox restrictions. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30967](https://cve.now/CVE-2021-30967.md): Description: A permissions issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30966](https://cve.now/CVE-2021-30966.md): A logic issue was addressed with improved state management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30965](https://cve.now/CVE-2021-30965.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30963](https://cve.now/CVE-2021-30963.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2021-30964](https://cve.now/CVE-2021-30964.md): An inherited permissions issue was addressed with additional restrictions. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30962](https://cve.now/CVE-2021-30962.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple macOS · Apple tvOS)
- [CVE-2021-30961](https://cve.now/CVE-2021-30961.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2021-30960](https://cve.now/CVE-2021-30960.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30959](https://cve.now/CVE-2021-30959.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2021-30958](https://cve.now/CVE-2021-30958.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30957](https://cve.now/CVE-2021-30957.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30956](https://cve.now/CVE-2021-30956.md): A lock screen issue allowed access to contacts on a locked device. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30955](https://cve.now/CVE-2021-30955.md): A race condition was addressed with improved state handling. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30954](https://cve.now/CVE-2021-30954.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30953](https://cve.now/CVE-2021-30953.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30952](https://cve.now/CVE-2021-30952.md): An integer overflow was addressed with improved input validation. (CVSS 8.8, KEV, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30951](https://cve.now/CVE-2021-30951.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30950](https://cve.now/CVE-2021-30950.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30949](https://cve.now/CVE-2021-30949.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30948](https://cve.now/CVE-2021-30948.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30946](https://cve.now/CVE-2021-30946.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30947](https://cve.now/CVE-2021-30947.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30945](https://cve.now/CVE-2021-30945.md): This issue was addressed with improved checks. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30944](https://cve.now/CVE-2021-30944.md): Description: A logic issue was addressed with improved state management. (no CVSS, Apple watchOS)
- [CVE-2021-30943](https://cve.now/CVE-2021-30943.md): An issue in the handling of group membership was resolved with improved logic. (no CVSS, Apple watchOS)
- [CVE-2021-30942](https://cve.now/CVE-2021-30942.md): Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30941](https://cve.now/CVE-2021-30941.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30940](https://cve.now/CVE-2021-30940.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30939](https://cve.now/CVE-2021-30939.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30938](https://cve.now/CVE-2021-30938.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30937](https://cve.now/CVE-2021-30937.md): A memory corruption vulnerability was addressed with improved locking. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30936](https://cve.now/CVE-2021-30936.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30935](https://cve.now/CVE-2021-30935.md): A logic issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-30933](https://cve.now/CVE-2021-30933.md): A race condition was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2021-30934](https://cve.now/CVE-2021-30934.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30932](https://cve.now/CVE-2021-30932.md): The issue was addressed with improved permissions logic. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30931](https://cve.now/CVE-2021-30931.md): A logic issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-30930](https://cve.now/CVE-2021-30930.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30929](https://cve.now/CVE-2021-30929.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30928](https://cve.now/CVE-2021-30928.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS · Apple tvOS +1)
- [CVE-2021-30927](https://cve.now/CVE-2021-30927.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30926](https://cve.now/CVE-2021-30926.md): Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2021-30925](https://cve.now/CVE-2021-30925.md): The issue was addressed with improved permissions logic. (no CVSS, Apple macOS · Apple watchOS)
- [CVE-2021-30924](https://cve.now/CVE-2021-30924.md): A denial of service issue was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2021-30923](https://cve.now/CVE-2021-30923.md): A race condition was addressed with improved locking. (no CVSS, Apple macOS)
- [CVE-2021-30922](https://cve.now/CVE-2021-30922.md): Multiple out-of-bounds write issues were addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30920](https://cve.now/CVE-2021-30920.md): A permissions issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2021-30921](https://cve.now/CVE-2021-30921.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30919](https://cve.now/CVE-2021-30919.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30918](https://cve.now/CVE-2021-30918.md): A Lock Screen issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30917](https://cve.now/CVE-2021-30917.md): A memory corruption issue existed in the processing of ICC profiles. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30916](https://cve.now/CVE-2021-30916.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30915](https://cve.now/CVE-2021-30915.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30914](https://cve.now/CVE-2021-30914.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30913](https://cve.now/CVE-2021-30913.md): The issue was addressed with improved permissions logic. (no CVSS, Apple macOS)
- [CVE-2021-30912](https://cve.now/CVE-2021-30912.md): The issue was addressed with improved permissions logic. (no CVSS, Apple macOS)
- [CVE-2021-30911](https://cve.now/CVE-2021-30911.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30910](https://cve.now/CVE-2021-30910.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30908](https://cve.now/CVE-2021-30908.md): An authentication issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30909](https://cve.now/CVE-2021-30909.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30907](https://cve.now/CVE-2021-30907.md): An integer overflow was addressed through improved input validation. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30906](https://cve.now/CVE-2021-30906.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30905](https://cve.now/CVE-2021-30905.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30904](https://cve.now/CVE-2021-30904.md): A sync issue was addressed with improved state validation. (no CVSS, Apple macOS)
- [CVE-2021-30903](https://cve.now/CVE-2021-30903.md): This issue was addressed with improved checks. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30902](https://cve.now/CVE-2021-30902.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30901](https://cve.now/CVE-2021-30901.md): Multiple out-of-bounds write issues were addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30900](https://cve.now/CVE-2021-30900.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 7.8, KEV, Apple iOS and iPadOS)
- [CVE-2021-30899](https://cve.now/CVE-2021-30899.md): A race condition was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2021-30898](https://cve.now/CVE-2021-30898.md): An access issue was addressed with additional sandbox restrictions on third party applications. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30897](https://cve.now/CVE-2021-30897.md): An issue existed in the specification for the resource timing API. (no CVSS, Apple macOS)
- [CVE-2021-30896](https://cve.now/CVE-2021-30896.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30894](https://cve.now/CVE-2021-30894.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple iOS and iPadOS · Apple tvOS)
- [CVE-2021-30895](https://cve.now/CVE-2021-30895.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30892](https://cve.now/CVE-2021-30892.md): An inherited permissions issue was addressed with additional restrictions. (no CVSS, Apple macOS)
- [CVE-2021-30890](https://cve.now/CVE-2021-30890.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30889](https://cve.now/CVE-2021-30889.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30888](https://cve.now/CVE-2021-30888.md): An information leakage issue was addressed. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30887](https://cve.now/CVE-2021-30887.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30886](https://cve.now/CVE-2021-30886.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30884](https://cve.now/CVE-2021-30884.md): The issue was resolved with additional restrictions on CSS compositing. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-30882](https://cve.now/CVE-2021-30882.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS and iPadOS · Apple watchOS)
- [CVE-2021-30883](https://cve.now/CVE-2021-30883.md): A memory corruption issue was addressed with improved memory handling. (CVSS 7.8, KEV, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30881](https://cve.now/CVE-2021-30881.md): An input validation issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30880](https://cve.now/CVE-2021-30880.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30879](https://cve.now/CVE-2021-30879.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30877](https://cve.now/CVE-2021-30877.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30876](https://cve.now/CVE-2021-30876.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2021-30875](https://cve.now/CVE-2021-30875.md): A lock screen issue allowed access to contacts on a locked device. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30874](https://cve.now/CVE-2021-30874.md): An authorization issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30873](https://cve.now/CVE-2021-30873.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30871](https://cve.now/CVE-2021-30871.md): This issue was addressed with a new entitlement. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2021-30870](https://cve.now/CVE-2021-30870.md): A logic issue existed in the handling of document loads. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30869](https://cve.now/CVE-2021-30869.md): A type confusion issue was addressed with improved state handling. (CVSS 7.8, KEV, Apple iOS and iPadOS · Apple macOS)
- [CVE-2021-30868](https://cve.now/CVE-2021-30868.md): A race condition was addressed with improved locking. (no CVSS, Apple macOS)
- [CVE-2021-30867](https://cve.now/CVE-2021-30867.md): The issue was addressed with improved authentication. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30866](https://cve.now/CVE-2021-30866.md): A user privacy issue was addressed by removing the broadcast MAC address. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-30865](https://cve.now/CVE-2021-30865.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2021-30864](https://cve.now/CVE-2021-30864.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30863](https://cve.now/CVE-2021-30863.md): This issue was addressed by improving Face ID anti-spoofing models. (no CVSS, Apple iOS and iPadOS)
- [CVE-2021-30862](https://cve.now/CVE-2021-30862.md): A validation issue was addressed with improved input sanitization. (no CVSS, Apple iTunes U)
- [CVE-2021-30861](https://cve.now/CVE-2021-30861.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2021-30860](https://cve.now/CVE-2021-30860.md): An integer overflow was addressed with improved input validation. (CVSS 7.8, KEV, Apple macOS · Apple watchOS +1)
- [CVE-2021-30859](https://cve.now/CVE-2021-30859.md): A type confusion issue was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2021-30858](https://cve.now/CVE-2021-30858.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, KEV, Apple macOS · Apple iOS)
- [CVE-2021-30856](https://cve.now/CVE-2021-30856.md): This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. (no CVSS, Apple macOS)
- [CVE-2021-30857](https://cve.now/CVE-2021-30857.md): A race condition was addressed with improved locking. (no CVSS, Apple macOS)
- [CVE-2021-30855](https://cve.now/CVE-2021-30855.md): A validation issue existed in the handling of symlinks. (no CVSS, Apple macOS)
- [CVE-2021-30854](https://cve.now/CVE-2021-30854.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-30853](https://cve.now/CVE-2021-30853.md): This issue was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2021-30852](https://cve.now/CVE-2021-30852.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS · Apple tvOS +1)
- [CVE-2021-30851](https://cve.now/CVE-2021-30851.md): A memory corruption vulnerability was addressed with improved locking. (no CVSS, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2021-28594](https://cve.now/CVE-2021-28594.md): Creative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code execution (CVSS 7.8, Adobe Prelude)
- [CVE-2021-28633](https://cve.now/CVE-2021-28633.md): Adobe Creative Cloud Installer Arbitrary File Write (CVSS 6.1, Adobe Creative Cloud)
- [CVE-2021-28629](https://cve.now/CVE-2021-28629.md): Adobe Animate heap corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Animate)
- [CVE-2021-28630](https://cve.now/CVE-2021-28630.md): Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Adobe Animate)
- [CVE-2021-28622](https://cve.now/CVE-2021-28622.md): Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Animate)
- [CVE-2021-28619](https://cve.now/CVE-2021-28619.md): Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure (CVSS 5.5, Adobe Animate)
- [CVE-2021-28620](https://cve.now/CVE-2021-28620.md): Adobe Animate heap corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Animate)
- [CVE-2021-28621](https://cve.now/CVE-2021-28621.md): Adobe Animate FLA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Animate)
- [CVE-2021-28617](https://cve.now/CVE-2021-28617.md): Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure (CVSS 5.5, Adobe Animate)
- [CVE-2021-28618](https://cve.now/CVE-2021-28618.md): Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure (CVSS 5.5, Adobe Animate)
- [CVE-2021-39157](https://cve.now/CVE-2021-39157.md): Improper Handling of Exceptional Conditions in detect-character-encoding (CVSS 7.5, sonicdoe detect-character-encoding · detect-character-encod…)
- [CVE-2021-28614](https://cve.now/CVE-2021-28614.md): Adobe After Effects Out-of-bounds Read vulnerability (CVSS 6.1, Adobe After Effects)
- [CVE-2021-28612](https://cve.now/CVE-2021-28612.md): Adobe After Effects Out-of-bounds Read vulnerability (CVSS 6.1, Adobe After Effects)
- [CVE-2021-28615](https://cve.now/CVE-2021-28615.md): Adobe After Effects Out-of-bounds Read vulnerability could lead to sensitive information disclosure (CVSS 5.5, Adobe After Effects)
- [CVE-2021-28608](https://cve.now/CVE-2021-28608.md): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe After Effects)
- [CVE-2021-28610](https://cve.now/CVE-2021-28610.md): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe After Effects)
- [CVE-2021-28611](https://cve.now/CVE-2021-28611.md): Adobe After Effects Out-of-bounds Read vulnerability (CVSS 6.1, Adobe After Effects)
- [CVE-2021-28616](https://cve.now/CVE-2021-28616.md): Adobe After Effects Out-of-bounds Read vulnerability (CVSS 6.1, Adobe After Effects)
- [CVE-2021-28609](https://cve.now/CVE-2021-28609.md): Adobe After Effects Out-of-bounds Read vulnerability could lead to sensitive information disclosure (CVSS 5.5, Adobe After Effects)
- [CVE-2021-28607](https://cve.now/CVE-2021-28607.md): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe After Effects)
- [CVE-2021-28606](https://cve.now/CVE-2021-28606.md): Adobe After Effects Stack Overflow vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe After Effects)
- [CVE-2021-28605](https://cve.now/CVE-2021-28605.md): Adobe After Effects memory corruption could lead to arbitrary code execution (CVSS 7.8, Adobe After Effects)
- [CVE-2021-28600](https://cve.now/CVE-2021-28600.md): Adobe After Effects Out-of-bounds Read vulnerability could lead to sensitive information disclosure (CVSS 5.5, Adobe After Effects)
- [CVE-2021-28602](https://cve.now/CVE-2021-28602.md): Adobe After Effects Memory corruption could lead to code execution vulnerability (CVSS 7.8, Adobe After Effects)
- [CVE-2021-28603](https://cve.now/CVE-2021-28603.md): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe After Effects)
- [CVE-2021-28604](https://cve.now/CVE-2021-28604.md): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe After Effects)
- [CVE-2021-28601](https://cve.now/CVE-2021-28601.md): Adobe After Effects NULL Pointer Dereference vulnerability (CVSS 3.3, Adobe After Effects)
- [CVE-2021-28627](https://cve.now/CVE-2021-28627.md): Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass (CVSS 5.4, Adobe Experience Manager)
- [CVE-2021-28628](https://cve.now/CVE-2021-28628.md): Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp (CVSS 6.3, Adobe Experience Manager)
- [CVE-2021-28625](https://cve.now/CVE-2021-28625.md): Adobe Experience Manager Cross-site Scripting vulnerability in inbox workitem.jsp (CVSS 6.3, Adobe Experience Manager)
- [CVE-2021-28626](https://cve.now/CVE-2021-28626.md): Adobe Experience Manager Improper Authorization at /content/usergenerated (CVSS 3.7, Adobe Experience Manager)
- [CVE-2021-28631](https://cve.now/CVE-2021-28631.md): Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2021-28551](https://cve.now/CVE-2021-28551.md): Adobe Acrobat Pro DC JPEG2000 Editing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2021-28552](https://cve.now/CVE-2021-28552.md): Adobe Acrobat Reader DC XFA Template Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2021-28632](https://cve.now/CVE-2021-28632.md): ZDI-CAN-13471: Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2021-28554](https://cve.now/CVE-2021-28554.md): Adobe Acrobat Reader DC Path Parsing Out-Of-Bounds Read could lead to arbitrary code execution (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2021-32263](https://cve.now/CVE-2021-32263.md): ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the ok\_csv\_circular\_buffer\_read function in ok\_csv.c. (no CVSS)
- [CVE-2021-39137](https://cve.now/CVE-2021-39137.md): Consensus flaw during block processing in go-ethereum (CVSS 6.5, go-ethereum · github.com/ethereum/go-ethereum)
- [CVE-2021-3712](https://cve.now/CVE-2021-3712.md): Read buffer overruns processing ASN.1 strings (CVSS 7.4, OpenSSL · openssl-src)
- [CVE-2021-3711](https://cve.now/CVE-2021-3711.md): SM2 Decryption Buffer Overflow (no CVSS, OpenSSL · openssl-src)
- [CVE-2021-26040](https://cve.now/CVE-2021-26040.md): \[20210801\] - Core - Insufficient access control for com\_media deletion endpoint (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2021-38714](https://cve.now/CVE-2021-38714.md): In Plib through 1.85, there is an integer overflow vulnerability that could result in arbitrary code execution. (no CVSS)
- [CVE-2021-37538](https://cve.now/CVE-2021-37538.md): Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to exec (no CVSS)
- [CVE-2021-39375](https://cve.now/CVE-2021-39375.md): Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValu (no CVSS)
- [CVE-2021-39376](https://cve.now/CVE-2021-39376.md): Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the CorCad\_F2/executaConsultaEspecifico IE\_CORPO\_ASSIS (no CVSS)
- [CVE-2021-38306](https://cve.now/CVE-2021-38306.md): Network Attached Storage on LG N1T1\*\*\* 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the (no CVSS)
- [CVE-2021-38556](https://cve.now/CVE-2021-38556.md): includes/configure\_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection. (no CVSS, billz/raspap-webgui)
- [CVE-2021-38557](https://cve.now/CVE-2021-38557.md): raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. (no CVSS, billz/raspap-webgui)
- [CVE-2021-36385](https://cve.now/CVE-2021-36385.md): A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fu (no CVSS)
- [CVE-2021-33191](https://cve.now/CVE-2021-33191.md): MiNiFi CPP arbitrary script execution is possible on the agent's host machine through the c2 protocol (no CVSS, Apache Software Foundation Apache NiFi - MiNiFi C++)
- [CVE-2021-38613](https://cve.now/CVE-2021-38613.md): The assets/index.php Image Upload feature of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to upload any code to the target sys (no CVSS)
- [CVE-2021-38612](https://cve.now/CVE-2021-38612.md): In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a log-reading function in maintenance/readLog.php allows an (no CVSS)
- [CVE-2021-38611](https://cve.now/CVE-2021-38611.md): A command-injection vulnerability in the Image Upload function of the NASCENT RemKon Device Manager 4.0.0.0 allows attackers to execute arbi (no CVSS)
- [CVE-2021-23432](https://cve.now/CVE-2021-23432.md): Prototype Pollution (CVSS 5.4, mootools)
- [CVE-2021-23429](https://cve.now/CVE-2021-23429.md): Denial of Service (DoS) (CVSS 6.5, transpile)
- [CVE-2021-23430](https://cve.now/CVE-2021-23430.md): Directory Traversal (CVSS 7.5, startserver)
- [CVE-2021-23431](https://cve.now/CVE-2021-23431.md): Cross-site Request Forgery (CSRF) (CVSS 5.4, joplin)
- [CVE-2021-23406](https://cve.now/CVE-2021-23406.md): Remote Code Execution (RCE) (CVSS 8.1, pac-resolver · degenerator)
- [CVE-2021-36690](https://cve.now/CVE-2021-36690.md): A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a c (no CVSS, sqlite)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-08-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.