← Back

Iphone Os

iphone_os

Vendor: Apple • 4,015 CVEs

CVEs (4,015)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-30874
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Aug 24, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A VPN configuration may be installed by an app without user permission.
CVE-2021-30871
1Apple
3Iphone Os
MacosWatchos
Jun 17, 2026
Aug 24, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
This issue was addressed with a new entitlement. This issue is fixed in iOS 14.7, watchOS 7.6, macOS Big Sur 11.5. A local attacker may be able to access analytics data.
CVE-2021-30870
1Apple
2Ipados
Iphone Os
Jun 17, 2026
Aug 24, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. Previewing an html file attached to a note may unexpectedly c...Show more
A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. Previewing an html file attached to a note may unexpectedly contact remote servers.Show less
CVE-2021-30869
1Apple
4Ipados
Iphone OsMac Os X+1 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Secu...Show more
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.Show less
CVE-2021-30867
1Apple
3Ipados
Iphone OsMacos
Jun 17, 2026
Aug 24, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The issue was addressed with improved authentication. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to access photo metadata without needing permission to access photos.
CVE-2021-30866
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A device may be passively tracked by its WiFi MAC address.
CVE-2021-30863
1Apple
2Ipados
Iphone Os
Jun 17, 2026
Aug 24, 2021
N/A· v4
6.8 MEDIUM· v3
4.6 MEDIUM· v2
This issue was addressed by improving Face ID anti-spoofing models. This issue is fixed in iOS 15 and iPadOS 15. A 3D model constructed to look like the enrolled user may be able to authenticate via Face ID.
CVE-2021-30860
3Apple
FreedesktopXpdfreader
7Ipados
Iphone OsMac Os X+4 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PD...Show more
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.Show less
CVE-2021-30859
1Apple
4Ipados
Iphone OsMac Os X+1 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may be able to execute ar...Show more
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2021-30858
3Apple
DebianFedoraproject
5Debian Linux
FedoraIpados+2 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution....Show more
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.Show less
CVE-2021-30857
1Apple
6Ipados
Iphone OsMac Os X+3 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
7.0 HIGH· v3
7.6 HIGH· v2
A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. A malicious applicat...Show more
A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2021-30855
1Apple
6Ipados
Iphone OsMac Os X+3 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS...Show more
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. An application may be able to access restricted files.Show less
CVE-2021-30854
1Apple
4Ipados
Iphone OsTvos+1 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
8.6 HIGH· v3
5.0 MEDIUM· v2
A logic issue was addressed with improved state management. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2021-30852
1Apple
5Ipados
Iphone OsMacos+2 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitr...Show more
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.Show less
CVE-2021-30851
3Apple
DebianFedoraproject
8Debian Linux
FedoraIpados+5 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.
CVE-2021-36690
3Apple
OracleSqlite
6Iphone Os
MacosSqlite+3 more
Jun 17, 2026
Aug 24, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because...Show more
A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.Show less
CVE-2021-36976
4Apple
FedoraprojectLibarchive+1 more
7Fedora
IpadosIphone Os+4 more
Jun 17, 2026
Jul 20, 2021
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).
CVE-2020-36331
5Apple
DebianNetapp+2 more
6Debian Linux
Enterprise LinuxIpados+3 more
Jun 17, 2026
May 21, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
CVE-2020-36330
5Apple
DebianNetapp+2 more
6Debian Linux
Enterprise LinuxIpados+3 more
Jun 17, 2026
May 21, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availabilit...Show more
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.Show less
CVE-2020-36329
5Apple
DebianNetapp+2 more
6Debian Linux
Enterprise LinuxIpados+3 more
Jun 17, 2026
May 21, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as syst...Show more
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.Show less