6.5

CVE-2021-1857

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may disclose sensitive user information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iCloud SwPlatform windows Version < 12.3
Apple ≫ iTunes SwPlatform windows Version < 12.11.3
Apple ≫ iPadOS Version < 14.5
Apple ≫ iPhone OS Version < 14.5
Apple ≫ macOS X Version 10.14
Apple ≫ macOS X Version 10.14.0
Apple ≫ macOS X Version 10.14.1
Apple ≫ macOS X Version 10.14.2
Apple ≫ macOS X Version 10.14.3
Apple ≫ macOS X Version 10.14.4
Apple ≫ macOS X Version 10.14.4 Update beta4
Apple ≫ macOS X Version 10.14.5
Apple ≫ macOS X Version 10.14.6
Apple ≫ macOS X Version 10.14.6 Update -
Apple ≫ macOS X Version 10.14.6 Update security_update_2019-001
Apple ≫ macOS X Version 10.14.6 Update security_update_2019-002
Apple ≫ macOS X Version 10.14.6 Update security_update_2019-004
Apple ≫ macOS X Version 10.14.6 Update security_update_2019-005
Apple ≫ macOS X Version 10.14.6 Update security_update_2019-006
Apple ≫ macOS X Version 10.14.6 Update security_update_2019-007
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-001
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-002
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-003
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-004
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-005
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-006
Apple ≫ macOS X Version 10.14.6 Update security_update_2020-007
Apple ≫ macOS X Version 10.14.6 Update security_update_2021-001
Apple ≫ macOS X Version 10.14.6 Update security_update_2021-002
Apple ≫ macOS X Version 10.15
Apple ≫ macOS X Version 10.15.1
Apple ≫ macOS X Version 10.15.2
Apple ≫ macOS X Version 10.15.3
Apple ≫ macOS X Version 10.15.4
Apple ≫ macOS X Version 10.15.5
Apple ≫ macOS X Version 10.15.6
Apple ≫ macOS X Version 10.15.6 Update -
Apple ≫ macOS X Version 10.15.6 Update supplemental_update
Apple ≫ macOS X Version 10.15.7
Apple ≫ macOS X Version 10.15.7 Update -
Apple ≫ macOS X Version 10.15.7 Update security_update_2020
Apple ≫ macOS X Version 10.15.7 Update security_update_2020-001
Apple ≫ macOS X Version 10.15.7 Update security_update_2020-005
Apple ≫ macOS X Version 10.15.7 Update security_update_2020-007
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-001
Apple ≫ macOS Version >= 11.0 < 11.3
Apple ≫ tvOS Version < 14.5
Apple ≫ watchOS Version < 7.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.22% 0.651
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

https://support.apple.com/en-us/HT212325
Vendor Advisory
https://support.apple.com/en-us/HT212317
Vendor Advisory
https://support.apple.com/en-us/HT212323
Vendor Advisory
https://support.apple.com/en-us/HT212324
Vendor Advisory
https://support.apple.com/en-us/HT212326
Vendor Advisory
https://support.apple.com/en-us/HT212327
Vendor Advisory
https://support.apple.com/en-us/HT212319
Vendor Advisory
https://support.apple.com/en-us/HT212321
Vendor Advisory