ByteOS Network

Vulnerability Details :

CVE-2021-30882

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-24 Aug, 2021 | 18:49

Updated At-03 Aug, 2024 | 22:48

A logic issue was addressed with improved validation. This issue is fixed in watchOS 8, iOS 15 and iPadOS 15. An application with microphone permission may unexpectedly access microphone input during a FaceTime call.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:24 Aug, 2021 | 18:49

Updated At:03 Aug, 2024 | 22:48

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

Apple Inc.

Product

iOS and iPadOS

Versions

Affected

From unspecified before 15 (custom)

Vendor

Apple Inc.

Product

watchOS

Versions

Affected

From unspecified before 8 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	An application with microphone permission may unexpectedly access microphone input during a FaceTime call

Type: text

CWE ID: N/A

Description: An application with microphone permission may unexpectedly access microphone input during a FaceTime call

References

Hyperlink	Resource
https://support.apple.com/en-us/HT212814	x_refsource_MISC
https://support.apple.com/en-us/HT212819	x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212814

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/en-us/HT212819

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT212814	x_refsource_MISC x_transferred
https://support.apple.com/en-us/HT212819	x_refsource_MISC x_transferred

Hyperlink: https://support.apple.com/en-us/HT212814

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/en-us/HT212819

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:24 Aug, 2021 | 19:15

Updated At:07 Nov, 2023 | 03:33

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

Apple Inc.

>>ipados>>Versions before 15.0(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>Versions before 15.0(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Apple Inc.

>>watchos>>Versions before 8.0(exclusive)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/HT212814	product-security@apple.com	N/A
https://support.apple.com/en-us/HT212819	product-security@apple.com	N/A

Hyperlink: https://support.apple.com/en-us/HT212814

Source: product-security@apple.com

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT212819

Source: product-security@apple.com

Resource: N/A

Similar CVEs

157Records found

CVE-2014-1539

Matching Score-8

Assigner-Mozilla Corporation

View Details

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-5||MEDIUM

EPSS-0.84% / 73.73%

7 Day CHG~0.00%

Published-11 Jun, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do not ensure visibility of the cursor after interaction with a Flash object and a DIV element, which makes it easier for remote attackers to conduct clickjacking attacks via JavaScript code that produces a fake cursor image.

Vendor-n/a Mozilla Corporation Apple Inc.

Product-firefox mac_os_x thunderbird n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2020-9820

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 46.05%

7 Day CHG~0.00%

Published-09 Jun, 2020 | 16:13

Updated-04 Aug, 2024 | 10:43

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5. A remote attacker may be able to modify the file system.

Vendor-Apple Inc.

Product-iphone_os ipados iOS

CVE-2020-9916

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.53% / 66.06%

7 Day CHG~0.00%

Published-16 Oct, 2020 | 16:47

Updated-04 Aug, 2024 | 10:43

A URL Unicode encoding issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker may be able to conceal the destination of a URL.

Vendor-Apple Inc.

Product-itunes iphone_os watchos ipados tvos safari icloud iTunes for Windows watchOS iCloud for Windows Safari iOS iCloud for Windows (Legacy)tvOS

CVE-2020-9787

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.29% / 52.15%

7 Day CHG~0.00%

Published-22 Oct, 2020 | 17:53

Updated-04 Aug, 2024 | 10:43

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences.

Vendor-Apple Inc.

Product-iphone_os ipad_os watchos tvos mac_os_x tvOS macOS watchOS iOS

CVE-2020-9941

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-1.47% / 80.11%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 20:52

Updated-04 Aug, 2024 | 10:50

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. A remote attacker may be able to unexpectedly alter application state.

Vendor-Apple Inc.

Product-iphone_os watchos ipados mac_os_x macos macOS

CVE-2014-3620

Matching Score-8

Assigner-Red Hat, Inc.

View Details

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5||MEDIUM

EPSS-1.67% / 81.34%

7 Day CHG~0.00%

Published-18 Nov, 2014 | 15:00

Updated-12 Apr, 2025 | 10:46

cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.

Vendor-n/a Apple Inc.CURL

Product-mac_os_x curl libcurl n/a

CVE-2015-5905

Matching Score-8

Assigner-Apple Inc.

View Details

Matching Score-8

Assigner-Apple Inc.

CVSS Score-5||MEDIUM

EPSS-0.38% / 58.40%

7 Day CHG~0.00%

Published-18 Sep, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site.

Vendor-n/a Apple Inc.

Product-iphone_os n/a

CVE-2021-30882

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs