Summary
| Detail | |||
|---|---|---|---|
| Vendor | Apple | First view | 2019-12-18 |
| Product | Ipados | Last view | 2021-10-19 |
| Version | * | Type | Os |
| Update | * | ||
| Edition | * | ||
| Language | * | ||
| Sofware Edition | * | ||
| Target Software | * | ||
| Target Hardware | * | ||
| Other | * | ||
| CPE Product | cpe:2.3:o:apple:ipados | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 7.8 | 2021-10-19 | CVE-2021-30849 | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 7.8 | 2021-10-19 | CVE-2021-30848 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution. |
| 7.8 | 2021-10-19 | CVE-2021-30847 | This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution. |
| 7.8 | 2021-10-19 | CVE-2021-30846 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution. |
| 7.8 | 2021-10-19 | CVE-2021-30843 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution. |
| 7.8 | 2021-10-19 | CVE-2021-30842 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution. |
| 7.8 | 2021-10-19 | CVE-2021-30841 | This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution. |
| 7.8 | 2021-10-19 | CVE-2021-30838 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to execute arbitrary code with system privileges on devices with an Apple Neural Engine. |
| 7.8 | 2021-10-19 | CVE-2021-30837 | A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An application may be able to execute arbitrary code with kernel privileges. |
| 7.8 | 2021-10-19 | CVE-2021-30835 | This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution. |
| 7.5 | 2021-10-19 | CVE-2021-30826 | A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. In certain situations, the baseband would fail to enable integrity and ciphering protection. |
| 7.8 | 2021-10-19 | CVE-2021-30825 | This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to cause unexpected application termination or arbitrary code execution. |
| 9.8 | 2021-10-19 | CVE-2021-30820 | A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8. A remote attacker may be able to cause arbitrary code execution. |
| 5.5 | 2021-10-19 | CVE-2021-30819 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Processing a maliciously crafted USD file may disclose memory contents. |
| 2.4 | 2021-10-19 | CVE-2021-30815 | A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen. |
| 5.5 | 2021-10-19 | CVE-2021-30811 | This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker may be able to read sensitive information. |
| 4.3 | 2021-10-19 | CVE-2021-30810 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup. |
| 8.8 | 2021-09-08 | CVE-2021-30797 | This issue was addressed with improved checks. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing maliciously crafted web content may lead to code execution. |
| 7.8 | 2021-09-08 | CVE-2021-30764 | Processing a maliciously crafted file may lead to arbitrary code execution. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. This issue was addressed with improved checks. |
| 5.5 | 2021-09-08 | CVE-2021-30763 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.7, watchOS 7.6. A shortcut may be able to bypass Internet permission requirements. |
| 7.8 | 2021-09-08 | CVE-2021-30759 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution. |
| 5.5 | 2021-09-08 | CVE-2021-30756 | A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6. A privacy issue in Now Playing was addressed with improved permissions. |
| 7.5 | 2021-09-08 | CVE-2021-30715 | A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted message may lead to a denial of service. |
| 6.3 | 2021-09-08 | CVE-2021-30714 | A race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and iPadOS 14.6. An application may be able to cause unexpected system termination or write kernel memory. |
| 7.1 | 2021-09-08 | CVE-2021-30710 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A malicious application may cause a denial of service or potentially disclose memory contents. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 30% (74) | CWE-787 | Out-of-bounds Write |
| 21% (52) | CWE-125 | Out-of-bounds Read |
| 7% (17) | CWE-416 | Use After Free |
| 4% (11) | CWE-20 | Improper Input Validation |
| 4% (10) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 3% (8) | CWE-668 | Exposure of Resource to Wrong Sphere |
| 3% (8) | CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflo... |
| 2% (7) | CWE-665 | Improper Initialization |
| 2% (7) | CWE-269 | Improper Privilege Management |
| 2% (5) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
| 1% (4) | CWE-362 | Race Condition |
| 1% (4) | CWE-287 | Improper Authentication |
| 1% (4) | CWE-200 | Information Exposure |
| 1% (4) | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path ... |
| 1% (3) | CWE-190 | Integer Overflow or Wraparound |
| 0% (2) | CWE-415 | Double Free |
| 0% (2) | CWE-347 | Improper Verification of Cryptographic Signature |
| 0% (2) | CWE-276 | Incorrect Default Permissions |
| 0% (2) | CWE-212 | Improper Cross-boundary Removal of Sensitive Data |
| 0% (1) | CWE-667 | Insufficient Locking |
| 0% (1) | CWE-613 | Insufficient Session Expiration |
| 0% (1) | CWE-522 | Insufficiently Protected Credentials |
| 0% (1) | CWE-476 | NULL Pointer Dereference |
| 0% (1) | CWE-401 | Failure to Release Memory Before Removing Last Reference ('Memory L... |
| 0% (1) | CWE-367 | Time-of-check Time-of-use (TOCTOU) Race Condition |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2020-04-21 | Apple Safari WebKit JavaScript engine type confusion attempt RuleID : 53474 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-04-21 | Apple Safari WebKit JavaScript engine type confusion attempt RuleID : 53473 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-03-19 | Apple Safari WebKit cached page memory corruption attempt RuleID : 53122 - Type : BROWSER-WEBKIT - Revision : 1 |
| 2020-03-19 | Apple Safari WebKit cached page memory corruption attempt RuleID : 53121 - Type : BROWSER-WEBKIT - Revision : 1 |
