Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-30706

EPSS 0.27% · P50
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-30706

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. This issue was addressed with improved checks.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple macOS 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apple macOS是美国苹果(Apple)公司的一套专为Mac计算机所开发的专用操作系统。 macOS存在缓冲区错误漏洞,该漏洞源于。该漏洞的存在是由于ImageIO框架中的边界条件。远程攻击者可利用该漏洞可以创建一个专门制作的WEBP文件,诱骗受害者打开它,触发越界读取错误并读取系统内存中的内容。该漏洞允许远程攻击者可利用该漏洞访问潜在的敏感信息。受影响的产品及版本如下:macOS: 10.14 18A391、10.14.1 18B75、10.14.1 18B2107、10.14.1 18B3094
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
AppleiOS and iPadOS unspecified ~ 14.6 -
ApplemacOS unspecified ~ 11.4 -
ApplemacOS unspecified ~ 14.6 -
ApplemacOS unspecified ~ 7.5 -

II. Public POCs for CVE-2021-30706

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-30706

登录查看更多情报信息。

Same Patch Batch · Apple · 2021-09-08 · 214 CVEs total

CVE-2021-1849Apple watchOS 数据伪造问题漏洞
CVE-2021-1831Apple Shortcuts 安全漏洞
CVE-2021-1835Apple iPadOS 权限许可和访问控制问题漏洞
CVE-2021-1833Apple iOS和Apple iPadOS 安全漏洞
CVE-2021-1843Apple macOS 输入验证错误漏洞
CVE-2021-1840Apple macOS 输入验证错误漏洞
CVE-2021-1838Apple macOS 安全漏洞
CVE-2021-1837Apple iOS 信任管理问题漏洞
CVE-2021-1839Apple macOS 权限许可和访问控制问题漏洞
CVE-2021-1846Apple macOS 缓冲区错误漏洞
CVE-2021-1832Apple watchOS 安全漏洞
CVE-2021-1841Apple macOS 缓冲区错误漏洞
CVE-2021-1851Apple watchOS 缓冲区错误漏洞
CVE-2021-1847Apple macOS 缓冲区错误漏洞
CVE-2021-1862Apple iOS和Apple iPadOS 授权问题漏洞
CVE-2021-1855Apple Safari 资源管理错误漏洞
CVE-2021-1859Apple macOS 权限许可和访问控制问题漏洞
CVE-2021-1860Apple iPadOS 缓冲区错误漏洞
CVE-2021-1854Apple iOS 安全漏洞
CVE-2021-1861Apple macOS 安全漏洞

Showing top 20 of 214 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-30706

No comments yet


Leave a comment