Apple · Multiple Products
CVE-2021-1782
Apple Multiple Products Race Condition Vulnerability
Cos'è
A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..
CISA: Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.
Cosa fare
Apply updates per vendor instructions.
Scadenza per le agenzie federali USA: 17 novembre 2021
Altre falle sfruttate di Apple
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 29 set 2026 | Out-of-Bounds Write | Multiple Products | Alta 8,8 | 26% |
| 20 mar 2026 | Buffer Overflow | Multiple Products | Alta 8,8 | 1,7% |
| 20 mar 2026 | Improper Locking | Multiple Products | Alta 7,8 | 0,4% |
| 20 mar 2026 | Classic Buffer Overflow | Multiple Products | Media 5,5 | 0,4% |
| 5 mar 2026 | Integer Overflow or Wraparound | Multiple Products | Alta 8,8 | 7,0% |
| 5 mar 2026 | Use-After-Free | Multiple Products | Alta 8,8 | 4,0% |
| 12 feb 2026 | Multiple Buffer Overflow | Multiple Products | Alta 7,8 | 1,7% |
| 15 dic 2025 | Use-After-Free WebKit | Multiple Products | Alta 8,8 | 26% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.