CVEs published September 8, 2021
276 CVEs were published on September 8, 2021: 7 critical, 25 high. 8 are now in CISA KEV.
- Published
- 276
- Critical
- 7
- High
- 25
- Medium
- 14
- Low
- 2
- Unrated
- 228
- Now in CISA KEV
- 8
- Fix available
- 235
Most affected products
- Apple macOS
- 57
- Apple iOS and iPadOS · Apple macOS
- 42
- Apple iOS and iPadOS · Apple tvOS +2
- 30
- Apple iOS and iPadOS
- 24
- Apple Security Update - Catalina · Apple iOS +1
- 12
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 11
- Apple iOS · Apple macOS
- 10
- Apple Security Update - Catalina · Apple macOS
- 9
- Apple iOS
- 5
- Apple iOS and iPadOS · Apple tvOS +1
- 4
Critical 7
- CVE-2020-24672ABB Base Software for SoftControl Remote Code Execution vulnerabilityABB Base Software for SoftControl
- CVE-2021-1972Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon ConQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1920Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivitQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1919Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1916Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11301Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon AutoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2020-11264Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
High 25
- CVE-2021-38388Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the LINE Central Dogma
- CVE-2021-32805URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilderdpgaspar Flask-AppBuilder · flask-appbuilder
- CVE-2021-3054PAN-OS: Unsigned Code Execution During Plugin Installation Race Condition VulnerabilityPalo Alto Networks PAN-OS
- CVE-2021-3053PAN-OS: Exceptional Condition Denial-of-Service (DoS)Palo Alto Networks PAN-OS
- CVE-2021-3052PAN-OS: Reflected Cross-Site Scripting (XSS) in Web InterfacePalo Alto Networks PAN-OS
- CVE-2021-3051Cortex XSOAR: Authentication Bypass in SAML AuthenticationPalo Alto Networks Cortex XSOAR
- CVE-2021-28571Adobe After Effects improper neutralization of special elements could lead to remote code executionAdobe After Effects
- CVE-2021-21105Adobe Illustrator memory corruption vulnerability could lead to remote code executionAdobe Illustrator
- CVE-2021-21104Adobe Illustrator memory corruption vulnerability could lead to remote code executionAdobe Illustrator
- CVE-2021-21897A code execution vulnerability exists in the DL_Dxf::handleLWPolylineData functionality of Ribbonsoft dxflib 3.17.0.Ribbonsoft
- CVE-2021-30663An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2021-30661A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple Safari +3
- CVE-2021-30713A permissions issue was addressed with improved validation.Apple macOS
- CVE-2021-30666A buffer overflow issue was addressed with improved memory handling.Apple iOS
- CVE-2021-30665A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2021-30762A use after free issue was addressed with improved memory management.Apple iOS
- CVE-2021-30761A memory corruption issue was addressed with improved state management.Apple iOS
- CVE-2021-28581Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalationAdobe Creative Cloud
- CVE-2021-28580Medium by Adobe file parsing buffer overflow vulnerability could lead to arbitrary code executionAdobe Medium
- CVE-2021-35217Insecure Deserialization of untrusted data causing Remote code execution vulnerability.SolarWinds Orion Platform
- CVE-2021-1923Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon ComQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1914Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-23404Cross-site Request Forgery (CSRF)sqlite-web
- CVE-2021-36182A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.13 and below allows aFortinet FortiWeb
- CVE-2021-36179A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code orFortinet FortiWeb
Medium, low and unrated 244
- CVE-2021-40818scheme/webauthn.c in Glewlwyd SSO server through 2.5.3 has a buffer overflow during FIDO2 signature validation in webauthn registration.
- CVE-2021-40814The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection.
- CVE-2021-30605Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects Google Chrome
- CVE-2021-36440Unrestricted File Upload in ShowDoc v2.9.5 allows remote attackers to execute arbitrary code via the 'file_url' parameter in the component Ashowdoc/showdoc
- CVE-2020-26772Command Injection in PPGo_Jobs v2.8.0 allows remote attackers to execute arbitrary code via the 'AjaxRun()' function.
- CVE-2020-19138Unrestricted Upload of File with Dangerous Type in DotCMS v5.2.3 and earlier allow remote attackers to execute arbitrary code via the compon
- CVE-2020-19137Incorrect Access Control in Autumn v1.0.4 and earlier allows remote attackers to obtain clear-text login credentials via the component "autu
- CVE-2021-40797An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1.neutron
- CVE-2021-36216LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.LINE for Windows
- CVE-2021-36215LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling.LINE client for iOS
- CVE-2021-40537Server Side Request Forgery (SSRF) vulnerability exists in owncloud/user_ldap < 0.15.4 in the settings of the user_ldap app.
- CVE-2021-31274In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->descriplibrenms/librenms
- CVE-2021-3055PAN-OS: XML External Entity (XXE) Reference Vulnerability in the PAN-OS Web InterfacePalo Alto Networks PAN-OS
- CVE-2021-3049Cortex XSOAR: Improper Authorization of Incident Investigations VulnerabilityPalo Alto Networks Cortex XSOAR
- CVE-2021-33982An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote att
- CVE-2021-33981An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and ea
- CVE-2021-40346An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, a
- CVE-2021-28569Adobe Media Encoder VOB file parsing out-of-bounds read could lead to information disclosure vulnerabilityAdobe Media Encoder
- CVE-2021-28568Adobe Genuine Services insecure file permission could lead to privilege escalationAdobe GoCart
- CVE-2021-28567Magento Commerce improper authorization allows an authenticated user to perform certain functions without permissionAdobe Magento Commerce · magento/community-edition +1
- CVE-2021-28566Magento Commerce information disclosure during upload action leveraging a specially crafted fileAdobe Magento Commerce · magento/community-edition
- CVE-2021-21103Adobe Illustrator memory corruption vulnerability could lead to information disclosureAdobe Illustrator
- CVE-2021-35526Storage of Sensitive Information Vulnerability in Hitachi ABB Power Grids System Data Manager – SDM600 ProductHitachi ABB Power Grids System Data Manager – SDM600
- CVE-2021-22004An issue was discovered in SaltStack Salt before 3003.3.Saltstack Salt · salt
- CVE-2021-1762An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1784A permissions issue existed in DiskArbitration.Apple macOS
- CVE-2021-1809A memory corruption issue was addressed with improved validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1826A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1824This issue was addressed with improved entitlements.Apple macOS
- CVE-2021-1817A memory corruption issue was addressed with improved state management.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1740A parsing issue in the handling of directory paths was addressed with improved path validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1828A memory corruption issue was addressed with improved validation.Apple macOS
- CVE-2021-1811A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple iTunes for Windows +4
- CVE-2021-1807A validation issue was addressed with improved input sanitization.Apple iOS and iPadOS · Apple watchOS
- CVE-2021-1812A logic issue was addressed with improved validation.Apple iOS and iPadOS
- CVE-2020-27940This issue was addressed with improved file handling.Apple TV app for Fire OS
- CVE-2021-1822A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2020-27942A logic issue was addressed with improved state management.Apple Security Update - Catalina
- CVE-2021-1770A buffer overflow may result in arbitrary code execution.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1825An input validation issue was addressed with improved input validation.Apple iOS and iPadOS · Apple Safari +5
- CVE-2021-1810A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-1816A buffer overflow was addressed with improved bounds checking.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2021-1813A validation issue was addressed with improved logic.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1814This issue was addressed with improved checks.Apple watchOS · Apple macOS
- CVE-2021-1808A memory corruption issue was addressed with improved validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1820A memory initialization issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1739A parsing issue in the handling of directory paths was addressed with improved path validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1815A parsing issue in the handling of directory paths was addressed with improved path validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30659A validation issue was addressed with improved logic.Apple iOS and iPadOS · Apple watchOS +1
- CVE-2021-30657A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-1867An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-1876A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2021-1875A double free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1868A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1883This issue was addressed with improved checks.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1884A race condition was addressed with improved locking.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1877An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2021-1885An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30656An access issue was addressed with improved memory management.Apple iOS and iPadOS
- CVE-2021-1864A use after free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2021-30653This issue was addressed with improved checks.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30658This issue was addressed with improved handling of file metadata.Apple macOS
- CVE-2021-30652A race condition was addressed with additional validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30660An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1882A memory corruption issue was addressed with improved validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1881An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30654This issue was addressed by removing additional entitlements.Apple GarageBand
- CVE-2021-30655An application may be able to execute arbitrary code with system privileges.Apple macOS
- CVE-2021-1872A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple watchOS +1
- CVE-2021-1874A logic issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2021-30662This issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2021-1880This issue was addressed with improved checks.Apple watchOS · Apple macOS
- CVE-2021-1878An integer overflow was addressed with improved input validation.Apple macOS
- CVE-2021-1865An issue obscuring passwords in screenshots was addressed with improved logic.Apple iOS and iPadOS
- CVE-2021-1873An API issue in Accessibility TCC permissions was addressed with improved state management.Apple macOS
- CVE-2021-1863An issue existed with authenticating the action triggered by an NFC tag.Apple iOS and iPadOS
- CVE-2021-1861An issue existed in determining cache occupancy.Apple macOS
- CVE-2021-1862Description: A person with physical access may be able to access contacts.Apple iOS and iPadOS
- CVE-2021-1860A memory initialization issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1859A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-1855A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-1854A call termination issue with was addressed with improved logic.Apple iOS and iPadOS
- CVE-2021-1852An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2021-1858Processing a maliciously crafted image may lead to arbitrary code execution.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1853A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-1848The issue was addressed with improved UI handling.Apple iOS and iPadOS
- CVE-2021-1857A memory initialization issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple iTunes for Windows +4
- CVE-2021-1849An issue in code signature validation was addressed with improved checks.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1847A memory corruption issue was addressed with improved validation.Apple macOS
- CVE-2021-1851A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1841A malicious application may be able to execute arbitrary code with kernel privileges.Apple macOS
- CVE-2021-1832Copied files may not have the expected file permissions.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1846Processing a maliciously crafted audio file may disclose restricted memory.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1839The issue was addressed with improved permissions logic.Apple macOS
- CVE-2021-1837A certificate validation issue was addressed.Apple iOS and iPadOS
- CVE-2021-1838This issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2021-1840A memory corruption issue was addressed with improved validation.Apple macOS
- CVE-2021-1843This issue was addressed with improved checks.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-1833This issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2021-1835This issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2021-1831The issue was addressed with improved permissions logic.Apple iOS and iPadOS
- CVE-2021-1834An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2021-1829A type confusion issue was addressed with improved state handling.Apple macOS
- CVE-2021-1836A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple tvOS
- CVE-2021-1830An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS
- CVE-2021-30664An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30680A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30719A local user may be able to cause unexpected system termination or read kernel memory.Apple macOS
- CVE-2021-30684A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30679This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2021-30681A validation issue existed in the handling of symlinks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30685This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30682A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30687An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30712A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30689A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30702A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30716A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30693A validation issue was addressed with improved logic.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30709This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30694An information disclosure issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30700This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30708An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30714A race condition was addressed with improved state handling.Apple iOS and iPadOS
- CVE-2021-30695An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30715A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30688A malicious application may be able to break out of its sandbox.Apple macOS
- CVE-2021-30697A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30710A memory corruption issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30683A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2021-30698A null pointer dereference was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30706Processing a maliciously crafted image may lead to disclosure of user information.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30699A window management issue was addressed with improved state management.Apple iOS and iPadOS
- CVE-2021-30705This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30690Multiple issues in apache were addressed by updating apache to version 2.4.46.Apple Security Update - Mojave
- CVE-2021-30692An information disclosure issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30701This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30696An attacker in a privileged network position may be able to misrepresent application state.Apple macOS
- CVE-2021-30718This issue was addressed with improved checks.Apple macOS
- CVE-2021-30717A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2021-30707This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30686An out-of-bounds read was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30691An information disclosure issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30704A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30703A double free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30675A memory corruption issue was addressed with improved state management.Apple Boot Camp
- CVE-2021-30678A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30673An access issue was addressed with improved access restrictions.Apple macOS
- CVE-2021-30676A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30671A validation issue was addressed with improved logic.Apple macOS
- CVE-2021-30677This issue was addressed with improved environment sanitization.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30674This issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2021-30668This issue was addressed with improved checks.Apple macOS
- CVE-2021-30669A logic issue was addressed with improved state management.Apple macOS
- CVE-2021-30667A logic issue was addressed with improved validation.Apple iOS and iPadOS
- CVE-2021-30672A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2021-30797This issue was addressed with improved checks.Apple iOS · Apple macOS
- CVE-2021-30790An information disclosure issue was addressed by removing the vulnerable code.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30795A use after free issue was addressed with improved memory management.Apple iOS · Apple macOS
- CVE-2021-30804A permissions issue was addressed with improved validation.Apple iOS
- CVE-2021-30791An out-of-bounds read was addressed with improved bounds checking.Apple iOS · Apple macOS
- CVE-2021-30789An out-of-bounds read was addressed with improved input validation.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30792An out-of-bounds write was addressed with improved input validation.Apple iOS · Apple macOS
- CVE-2021-30793A logic issue was addressed with improved state management.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30802A use after free issue was addressed with improved memory management.Apple iOS · Apple tvOS
- CVE-2021-30784Multiple issues were addressed with improved logic.Apple macOS
- CVE-2021-30786A race condition was addressed with improved state handling.Apple iOS · Apple macOS
- CVE-2021-30787This issue was addressed with improved checks.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30782This issue was addressed with improved checks.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30785A buffer overflow was addressed with improved bounds checking.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30783An access issue was addressed with improved access restrictions.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30780An out-of-bounds write issue was addressed with improved bounds checking.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30778This issue was addressed with improved entitlements.Apple macOS
- CVE-2021-30781This issue was addressed with improved checks.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30776A logic issue was addressed with improved validation.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30779This issue was addressed with improved checks.Apple iOS · Apple macOS
- CVE-2021-30773An issue in code signature validation was addressed with improved checks.Apple iOS · Apple tvOS +1
- CVE-2021-30772This issue was addressed with improved checks.Apple macOS
- CVE-2021-30774A logic issue was addressed with improved validation.Apple iOS · Apple macOS
- CVE-2021-30777An injection issue was addressed with improved validation.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30769A logic issue was addressed with improved state management.Apple iOS · Apple tvOS +1
- CVE-2021-30775A memory corruption issue was addressed with improved state management.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30766An out-of-bounds write was addressed with improved input validation.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30770A logic issue was addressed with improved validation.Apple iOS · Apple tvOS +1
- CVE-2021-30764Processing a maliciously crafted file may lead to arbitrary code execution.Apple iOS and iPadOS · Apple tvOS +1
- CVE-2021-30765An out-of-bounds write was addressed with improved input validation.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30768A logic issue was addressed with improved validation.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30760An integer overflow was addressed through improved input validation.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30763An input validation issue was addressed with improved input validation.Apple iOS · Apple watchOS
- CVE-2021-30758A type confusion issue was addressed with improved state handling.Apple iOS · Apple macOS
- CVE-2021-30756A local attacker may be able to view Now Playing information from the lock screen.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30751This issue was addressed with improved data protection.Apple macOS
- CVE-2021-30757This issue was addressed by enabling hardened runtime.Apple iMovie
- CVE-2021-30759A stack overflow was addressed with improved input validation.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30755Processing a maliciously crafted font may result in the disclosure of process memory.Apple macOS
- CVE-2021-30753Processing a maliciously crafted font may result in the disclosure of process memory.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30749Multiple memory corruption issues were addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30743An out-of-bounds write was addressed with improved input validation.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30746An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30752Processing a maliciously crafted image may lead to arbitrary code execution.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2021-30750The issue was addressed with improved permissions logic.Apple macOS
- CVE-2021-30748A memory corruption issue was addressed with improved state management.Apple iOS · Apple macOS
- CVE-2021-30741A use after free issue was addressed with improved memory management.Apple iOS and iPadOS
- CVE-2021-30739A local attacker may be able to elevate their privileges.Apple macOS
- CVE-2021-30744Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30735A malicious application may be able to execute arbitrary code with kernel privileges.Apple macOS
- CVE-2021-30742A memory consumption issue was addressed with improved memory handling.Apple iOS and iPadOS
- CVE-2021-30740A logic issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30738A malicious application may be able to overwrite arbitrary files.Apple macOS
- CVE-2021-30737A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30729A logic issue was addressed with improved restrictions.Apple iOS and iPadOS
- CVE-2021-30733An out-of-bounds read was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30736A buffer overflow was addressed with improved size validation.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30731This issue was addressed with improved checks.Apple macOS
- CVE-2021-30727A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30734Multiple memory corruption issues were addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30725A memory corruption issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30723An information disclosure issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30721A path handling issue was addressed with improved validation.Apple macOS
- CVE-2021-30728An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS
- CVE-2021-30726A malicious application may be able to execute arbitrary code with kernel privileges.Apple macOS
- CVE-2021-30724This issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30722An information disclosure issue was addressed with improved state management.Apple macOS
- CVE-2021-30720A logic issue was addressed with improved restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2021-30788This issue was addressed with improved checks.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30796A logic issue was addressed with improved validation.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30805A memory corruption issue was addressed with improved input validation.Apple Security Update - Catalina · Apple macOS
- CVE-2021-30799Multiple memory corruption issues were addressed with improved memory handling.Apple Security Update - Catalina · Apple iOS +1
- CVE-2021-30798A logic issue was addressed with improved state management.Apple iOS · Apple macOS
- CVE-2021-30803A permissions issue was addressed with improved validation.Apple macOS
- CVE-2021-30800This issue was addressed with improved checks.Apple iOS
- CVE-2021-28701Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory.xen
- CVE-2021-1930Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1929Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-1928Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon ConsumQualcomm Snapdragon Connectivity, Snapdragon Consumer IOT,…
- CVE-2021-1904Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon AuQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-36695Deskpro cloud and on-premise Deskpro 2021.1.6 and fixed in Deskpro 2021.1.7 contains a cross-site scripting (XSS) vulnerability in the downl
- CVE-2021-40377SmarterTools SmarterMail 16.x before build 7866 has stored XSS.
- CVE-2020-29012An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired adminFortinet FortiSandbox
- CVE-2021-39122Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information DisclosAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-39121Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projecAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-39116Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of SAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-21996An issue was discovered in SaltStack Salt before 3003.3.Saltstack Salt · salt
- CVE-2021-40812The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return valu