DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Apple macOS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-12-13
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Programmcode auszuführen, beliebigen Programmcode mit Kernel-Privilegien auszuführen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.
01
beschreibt (52)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-30767US | medium5.5OT erhöht | — | ||
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS… | ||||
| CVE-2021-30996US | high7.0 | — | ||
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute ar… | ||||
| CVE-2021-30995US | high7.0 | — | ||
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.… | ||||
| CVE-2021-30993US | high8.1 | — | ||
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. An attacker in a… | ||||
| CVE-2021-30990US | medium5.5 | — | ||
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application m… | ||||
| CVE-2021-30987US | medium5.5OT erhöht | — | ||
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked via BSSIDs. | ||||
| CVE-2021-30986US | medium5.5 | — | ||
A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address… | ||||
| CVE-2021-30984US | high7.5 | — | ||
A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing m… | ||||
| CVE-2021-30982US | medium5.9 | — | ||
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A remote attacker may be… | ||||
| CVE-2021-30981US | high7.8 | — | ||
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. An application m… | ||||
| CVE-2021-30980US | high7.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina… | ||||
| CVE-2021-30979US | high7.8 | — | ||
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 202… | ||||
| CVE-2021-30977US | high7.8 | — | ||
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious appl… | ||||
| CVE-2021-30976US | medium5.5 | — | ||
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious applica… | ||||
| CVE-2021-30975US | high8.6OT erhöht | — | ||
This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, ma… | ||||
| CVE-2021-30973US | medium5.5 | — | ||
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021… | ||||
| CVE-2021-30971US | high7.8 | — | ||
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Updat… | ||||
| CVE-2021-30970US | medium5.5 | — | ||
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy… | ||||
| CVE-2021-30969US | high7.8 | — | ||
A path handling issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Processing a maliciously crafted URL m… | ||||
| CVE-2021-30968US | medium5.5 | — | ||
A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Secu… | ||||
20 von 52 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Apple Security Advisroy vom 2021-12-13external
- Apple Security Advisroy vom 2021-12-13external
- Apple Security Advisroy vom 2021-12-13external
- WID-SEC-W-2026-0631 - CSAF Versionself
- WID-SEC-2026-0631 - Portal Versionself
- CISA KEV CVE-2021-30952 von 2026-03-05external
- Microsoft 365 Defender Research Teamexternal
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan