Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS Big SurInput Validation

Risk 88
Severity
10
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

1 / 2
First published (updated )
CVE-2021-30805

Apple macOS Big SurRace Condition, Input Validation, Integer Overflow, Buffer Overflow

Risk 88
Severity
10
Race Condition, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

1 / 29
Source: MITRE
First published (updated )
CVE-2021-30793

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 88
Severity
9.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution.

1 / 52
Source: MITRE
First published (updated )
CVE-2022-26723

Apple macOS Big SurApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1870

debian/webkit2gtkApple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability

Risk 99
Severity
9.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0003.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1871

redhat/zlibBuffer Overflow, Use After Free, Race Condition, Input Validation, SQL Injection

Risk 91
Severity
9.8
Buffer Overflow, Use After Free, Race Condition, Input Validation, SQL Injection
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call inflateGetHeader.

1 / 117
First published (updated )
CVE-2022-37434

Apple iOS and macOSApple Memory Corruption Vulnerability

Risk 100
Severity
9.8
Exploited
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IOMobileFrameBuffer. A memory corruption issue was addressed with improved input validation.

1 / 5
First published (updated )
CVE-2022-22587

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 88
Severity
9.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 37
Source: Apple
First published (updated )
CVE-2022-26776

redhat/httpdPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

Risk 90
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A buffer overflow flaw in httpd's lua module could allow an out-of-bounds write. An attacker who is able to submit a crafted request to an httpd instance that is using the lua module may be able to cause an impact to confidentiality, integrity, and/or availability.

1 / 6

Remedy

Disabling mod_lua and restarting httpd will mitigate this flaw. See https://access.redhat.com/articles/10649 for more information.
First published (updated )
CVE-2021-44790

redhat/jbcs-httpd24-apr-utilHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

Risk 89
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling.

1 / 6
First published (updated )
CVE-2022-22720

Apple macOS Big SurInput Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 88
Severity
9.8
Input Validation, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AMD. A buffer overflow issue was addressed with improved memory handling.

1 / 36
Source: Apple
First published (updated )
CVE-2022-32882

Apple macOS Big SurRace Condition, Input Validation

Risk 80
Severity
9.3
Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 11
Source: Apple
First published (updated )
CVE-2021-30772

Apple macOS Big SurRace Condition, Input Validation

Risk 80
Severity
9.3
Race Condition, Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 13
Source: Apple
First published (updated )
CVE-2021-30777

Apple macOS Big SurInput Validation, Race Condition

Risk 80
Severity
9.3
Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 18
Source: Apple
First published (updated )
CVE-2021-30780

Apple macOS Big SurInput Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 80
Severity
9.3
Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 27
Source: Apple
First published (updated )
CVE-2021-30765

Apple macOS Big SurInput Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 80
Severity
9.3
Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 27
Source: Apple
First published (updated )
CVE-2021-30766

debian/webkit2gtkInput Validation, Race Condition, Integer Overflow, Use After Free, Buffer Overflow

Risk 80
Severity
9.3
Input Validation, Race Condition, Integer Overflow, Use After Free, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ActionKit. An input validation issue was addressed with improved input validation.

1 / 50
Source: Apple
First published (updated )
CVE-2021-30799

Apple macOS Big SurInput Validation, Race Condition

Risk 80
Severity
9.3
Input Validation, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges.

1 / 17
Source: MITRE
First published (updated )
CVE-2021-30774

debian/webkit2gtkUse After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow

Risk 80
Severity
9.3
Use After Free, Input Validation, Race Condition, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management.

1 / 48
Source: Red Hat
First published (updated )
CVE-2021-30795

Apple macOS Big SurInput Validation

Risk 80
Severity
9.3
Input Validation
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. An application may be able to execute arbitrary code with kernel privileges.

1 / 9
Source: MITRE
First published (updated )
CVE-2021-30748

ubuntu/curlInfoleak, Race Condition

Risk 71
Severity
9.1
Infoleak, Race Condition
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Accounts. A privacy issue was addressed with improved private data redaction for log entries.

1 / 14
Source: Apple
First published (updated )
CVE-2023-28322

redhat/jbcs-httpd24-httpdcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

Risk 69
Severity
9.1
Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

A flaw was found in httpd, where it incorrectly limits the value of the LimitXMLRequestBody option. This issue can lead to an integer overflow and later causes an out-of-bounds write.

1 / 6
First published (updated )
CVE-2022-22721

debian/webkit2gtkApple iOS, iPadOS, macOS Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

1 / 3
First published (updated )
CVE-2021-30858

Apple macOS Big SurApple Multiple Products WebKit Storage Use-After-Free Vulnerability

Risk 95
Severity
8.8
Exploited
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use after free issue was addressed with improved memory management.

1 / 5
Source: Red Hat
First published (updated )
CVE-2021-30661

debian/webkit2gtkApple Multiple Products WebKit Memory Corruption Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management.

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-30665

debian/webkit2gtkApple Multiple Products WebKit Integer Overflow Vulnerability

Risk 95
Severity
8.8
Exploited
Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow was addressed with improved input validation.

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-30663

Apple macOS Big SurUse After Free, Input Validation, Buffer Overflow

Risk 76
Severity
8.8
Use After Free, Input Validation, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Accessibility. A privacy issue was addressed with improved private data redaction for log entries.

1 / 22
Source: Apple
First published (updated )
CVE-2023-40398

Apple Multiple ProductsApple Multiple Products Type Confusion Vulnerability

Risk 95
Severity
8.8
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A flaw was found in WebKitGTK.

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: A type confusion issue was addressed with improved state handling.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

1 / 4
Source: Red Hat
First published (updated )
CVE-2021-1789

Apple macOS Big SurBuffer Overflow, Input Validation, Use After Free, Race Condition

Risk 79
Severity
8.8
Buffer Overflow, Input Validation, Use After Free, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accelerate Framework. A memory consumption issue was addressed with improved memory handling.

1 / 62
Source: Apple
First published (updated )
CVE-2021-39537

Apple macOS Big SurRace Condition, Input Validation, Integer Overflow, Buffer Overflow

Risk 73
Severity
8.8
Race Condition, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AMD Kernel. A memory corruption issue was addressed with improved input validation.

1 / 31
Source: Apple
First published (updated )
CVE-2021-30677

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203