Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS Big SurInput Validation

Risk 88
Severity
10
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

1 / 2
First published (updated )
CVE-2021-30805

Apple macOS Big SurRace Condition, Input Validation, Integer Overflow, Buffer Overflow

Risk 88
Severity
10
Race Condition, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

1 / 29
Source: MITRE
First published (updated )
CVE-2021-30793

Apple macOS Big SurApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1870

debian/webkit2gtkApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0003.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1871

Apple tvOSInput Validation, Integer Overflow, Buffer Overflow, Race Condition, Use After Free

Risk 88
Severity
9.8
Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 32
Source: Apple
First published (updated )
CVE-2022-26775

redhat/httpdPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

Risk 90
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A buffer overflow flaw in httpd's lua module could allow an out-of-bounds write. An attacker who is able to submit a crafted request to an httpd instance that is using the lua module may be able to cause an impact to confidentiality, integrity, and/or availability.

1 / 6

Remedy

Disabling mod_lua and restarting httpd will mitigate this flaw. See https://access.redhat.com/articles/10649 for more information.
First published (updated )
CVE-2021-44790

redhat/jbcs-httpd24-apr-utilHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Risk 89
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling.

1 / 6
First published (updated )
CVE-2022-22720

Apple macOS Big SurRace Condition, Input Validation

Risk 80
Severity
9.3
Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 11
Source: Apple
First published (updated )
CVE-2021-30772

Apple macOS Big SurRace Condition, Input Validation

Risk 80
Severity
9.3
Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 13
Source: Apple
First published (updated )
CVE-2021-30777

Apple macOS Big SurInput Validation, Race Condition

Risk 80
Severity
9.3
Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 18
Source: Apple
First published (updated )
CVE-2021-30780

Apple macOS Big SurInput Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 80
Severity
9.3
Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 27
Source: Apple
First published (updated )
CVE-2021-30765

Apple macOS Big SurInput Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 80
Severity
9.3
Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 27
Source: Apple
First published (updated )
CVE-2021-30766

debian/webkit2gtkInput Validation, Race Condition, Integer Overflow, Use After Free, Buffer Overflow

Risk 80
Severity
9.3
Input Validation, Race Condition, Integer Overflow, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 50
Source: Apple
First published (updated )
CVE-2021-30799

Apple macOS Big SurInput Validation, Race Condition

Risk 80
Severity
9.3
Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges.

1 / 17
Source: MITRE
First published (updated )
CVE-2021-30774

redhat/jbcs-httpd24-httpdcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

Risk 69
Severity
9.1
Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

A flaw was found in httpd, where it incorrectly limits the value of the LimitXMLRequestBody option. This issue can lead to an integer overflow and later causes an out-of-bounds write.

1 / 6
First published (updated )
CVE-2022-22721

Apple Multiple ProductsApple Multiple Products Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: A type confusion issue was addressed with improved state handling.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1789

Apple macOS Big SurRace Condition, Input Validation, Integer Overflow, Buffer Overflow

Risk 73
Severity
8.8
Race Condition, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 31
Source: Apple
First published (updated )
CVE-2021-30677

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow

Risk 79
Severity
8.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 25
Source: Apple
First published (updated )
CVE-2022-26748

redhat/zlibBuffer Overflow, Input Validation, Use After Free, Integer Overflow, Race Condition

Risk 57
Severity
8.2
Buffer Overflow, Input Validation, Use After Free, Integer Overflow, Race Condition
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 72
Source: Apple
First published (updated )
CVE-2018-25032

redhat/jbcs-httpd24-httpdPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

Risk 57
Severity
8.2
Null Pointer Dereference, SSRF, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

1 / 6

Remedy

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
First published (updated )
CVE-2021-44224

redhat/jbcs-httpd24-apr-utilUse After Free, Input Validation, Buffer Overflow, Integer Overflow, Race Condition

Risk 78
Severity
8.1
Use After Free, Input Validation, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XMLPARSEDTDVALID option and without the XMLPARSENOENT option, resulting in a use-after-free issue.

1 / 43
First published (updated )
CVE-2022-23308

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 52
Source: Apple
First published (updated )
CVE-2022-26715

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 82
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.

1 / 66
First published (updated )
CVE-2022-26761

debian/zshInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 70
Severity
7.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 68
Source: Apple
First published (updated )
CVE-2021-45444

Apple macOS Big SurApple Multiple Products Integer Overflow Vulnerability

Risk 85
Severity
7.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CoreGraphics. An integer overflow was addressed with improved input validation.

1 / 7
First published (updated )
CVE-2021-30860

Apple iOS, iPadOS, and macOSApple iOS, iPadOS, and macOS Type Confusion Vulnerability

Risk 97
Severity
7.8
Exploited
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.

1 / 3
First published (updated )
CVE-2021-30869

Apple macOS Big SurInput Validation

Risk 69
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 4
Source: Apple
First published (updated )
CVE-2021-30790

Apple macOS Big SurInput Validation

Risk 70
Severity
7.8
Input Validation
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 8
Source: Apple
First published (updated )
CVE-2021-30781

Apple macOS Big SurInput Validation, Integer Overflow, Race Condition

Risk 69
Severity
7.8
Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 22
Source: Apple
First published (updated )
CVE-2021-30760

Apple macOS Big SurInput Validation, Race Condition, Integer Overflow

Risk 69
Severity
7.8
Input Validation, Race Condition, Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.

1 / 24
Source: MITRE
First published (updated )
CVE-2021-30759

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203