IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.8Yüksek KEV

CVE-2021-30900Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Apple iOS and iPadOS Yayım: (5 yıl önce)

Aktif olarak istismar ediliyor — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 30.03.2023 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 20.04.2023.

Gerekli işlem: Apply updates per vendor instructions. https://support.apple.com/en-us/HT21286, https://support.apple.com/en-us/HT212868, https://support.apple.com/kb/HT212872; https://nvd.nist.gov/vuln/detail/CVE-2021-30900

Açıklama

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

Zayıflık türü (CWE): CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Apple iOS and iPadOS unspecified – < 15.1
apple ipados < 14.8.1
apple iphone os < 14.8.1
apple macos < 11.6.1

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (5)
  • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* < 14.8.1
  • cpe:2.3:o:apple:ipados:15.0:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* < 14.8.1
  • cpe:2.3:o:apple:iphone_os:15.0:*:*:*:*:*:*:*
  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* < 11.6.1

Aynı üründe son açıklar — Apple iOS / iPadOS

8.8Yüksek
CVE-2026-113970
Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, vision…

3.5Düşük
CVE-2026-113971
Apple iOS and iPadOS

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen.

5.4Orta
CVE-2026-113964
Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…

5.4Orta
CVE-2026-113965
Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

This issue was addressed with improved checks. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6…

5.4Orta
CVE-2026-113968
Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…

Puansız
CVE-2026-113969
Apple iOS and iPadOS; Apple macOS; Apple visionOS; Apple watchOS

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1,…