Vulnerabilities

CVE-2021-30847

October 25, 2021

This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.

Summary:

This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.

Reference Links(if available):

https://support.apple.com/en-us/HT212819

https://support.apple.com/en-us/HT212817

https://support.apple.com/en-us/HT212804

https://support.apple.com/en-us/HT212815

https://support.apple.com/en-us/HT212805

CVSS Score (if available)

v2: / MEDIUM

v3: /

CVE-2021-30847

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

Fortifying the Backbone: Cybersecurity for Critical Infrastructure

Bank of England U-Turns on Critical Third Party Vulnerability Disclosure Rules

Sitting Ducks DNS Attacks Threaten Over 1 Million Global Domains

API Security Threats: 83% of Companies Experience Security Incidents

Microsoft Power Pages: Misconfiguration Risks and Data Exposure

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Fortifying the Backbone: Cybersecurity for Critical Infrastructure

Bank of England U-Turns on Critical Third Party Vulnerability Disclosure Rules

Sitting Ducks DNS Attacks Threaten Over 1 Million Global Domains

API Security Threats: 83% of Companies Experience Security Incidents

Microsoft Power Pages: Misconfiguration Risks and Data Exposure