Skip to main content

Ipad Os CVE-2021-1797

MEDIUM
2021-04-02 product-security@apple.com
Apple Information Disclosure Ipad Os Iphone Os Mac Os X macOS Tvos Watchos
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Apr 02, 2021 - 19:15 nvd
MEDIUM 5.5

DescriptionNVD

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files.

AnalysisAI

The issue was addressed with improved permissions logic. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files. Affected products include: Apple Ipad Os, Apple Iphone Os, Apple Mac Os X, Apple Macos, Apple Tvos.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ipad Os

View all
CVE-2021-1818 CRITICAL
9.8 Apr 02

A logic issue was addressed with improved state management. Rated critical severity (CVSS 9.8), this vulnerability is re
CVE-2021-1796 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
CVE-2021-1795 CRITICAL
9.8 Apr 02

An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
CVE-2021-1794 CRITICAL
9.8 Apr 02

An out-of-bounds read was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabili
CVE-2024-23226 HIGH
8.8 Mar 08

The issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely ex
CVE-2022-22637 HIGH
8.8 Sep 23

A logic issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remote
CVE-2022-22628 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
CVE-2022-22624 HIGH
8.8 Sep 23

A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
CVE-2022-22610 HIGH
8.8 Sep 23

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerabili
CVE-2020-3901 HIGH
8.8 Apr 01

A type confusion issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability i
CVE-2020-3900 HIGH
8.8 Apr 01

A memory corruption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabilit
CVE-2020-3899 HIGH
8.8 Apr 01

A memory consumption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabili

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2021-1797 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy