<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1809[/INST]A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to read restricted memory.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1810[/INST]A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/164375/Gatekeeper-Bypass-Proof-Of-Concept.html'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1811[/INST]A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted font may result in the disclosure of process memory.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212319'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212321'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1812[/INST]A logic issue was addressed with improved validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to execute arbitrary code with system privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1813[/INST]A validation issue was addressed with improved logic. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1814[/INST]This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: watchOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1815[/INST]A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1816[/INST]A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to execute arbitrary code with kernel privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1817[/INST]A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1818[/INST]A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1820[/INST]A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1821[/INST]A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big Sur 11.5. Visiting a maliciously crafted webpage may lead to a system denial of service.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212602'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212605'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1822[/INST]A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1824[/INST]This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application with root privileges may be able to access private information.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1825[/INST]An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212318'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212319'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212321'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1826[/INST]A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1828[/INST]A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. An application may be able to cause unexpected system termination or write kernel memory.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1829[/INST]A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1830[/INST]An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1831[/INST]The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1832[/INST]Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. The issue was addressed with improved permissions logic.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1833[/INST]This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to gain elevated privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1834[/INST]An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to execute arbitrary code with kernel privileges.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1835[/INST]This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to access notes from the lock screen.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1836[/INST]A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, tvOS 14.5. A local user may be able to create or modify privileged files.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1837[/INST]A certificate validation issue was addressed. This issue is fixed in iOS 14.5 and iPadOS 14.5. An attacker in a privileged network position may be able to alter network traffic.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1838[/INST]This issue was addressed with improved checks. This issue is fixed in iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1839[/INST]The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A local attacker may be able to elevate their privileges.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1840[/INST]A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A local attacker may be able to elevate their privileges.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1841[/INST]A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. An out-of-bounds write issue was addressed with improved bounds checking.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1843[/INST]This issue was addressed with improved checks. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1844[/INST]A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212220'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212221'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212222'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212223'}, {'name': 'FEDORA-2021-864dc37032', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT212323'}, {'name': '20210427 APPLE-SA-2021-04-26-6 tvOS 14.5', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2021/Apr/55'}, {'name': 'DSA-4923', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4923'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1846[/INST]Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds read was addressed with improved input validation.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1847[/INST]A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1848[/INST]The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1849[/INST]An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1851[/INST]A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1852[/INST]An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1853[/INST]A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A local attacker may be able to elevate their privileges.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1854[/INST]A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops. .
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1855[/INST]A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to force unnecessary network connections to fetch its favicon.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1857[/INST]A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may disclose sensitive user information.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212319'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212321'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1858[/INST]Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds write issue was addressed with improved bounds checking.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1859[/INST]A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. Locked Notes content may have been unexpectedly unlocked.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1860[/INST]A memory initialization issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to disclose kernel memory.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1861[/INST]An issue existed in determining cache occupancy. The issue was addressed through improved logic. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to track users by setting state in a cache.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1862[/INST]Description: A person with physical access may be able to access contacts. This issue is fixed in iOS 14.5 and iPadOS 14.5. Impact: An issue with Siri search access to information was addressed with improved logic.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1863[/INST]An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1864[/INST]A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1865[/INST]An issue obscuring passwords in screenshots was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible on screen.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1867[/INST]An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, macOS Big Sur 11.3. A malicious application may be able to execute arbitrary code with kernel privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1868[/INST]A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local attacker may be able to elevate their privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1870[/INST]A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'name': 'FEDORA-2021-864dc37032', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/'}, {'name': 'FEDORA-2021-619711d709', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/'}, {'name': 'GLSA-202104-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202104-03'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1871[/INST]A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'name': 'FEDORA-2021-864dc37032', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/'}, {'name': 'DSA-4923', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4923'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1872[/INST]A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute being enabled.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1873[/INST]An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text fields.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1874[/INST]A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary code with kernel privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1875[/INST]A double free issue was addressed with improved memory management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted file may lead to heap corruption.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1876[/INST]A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1877[/INST]An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1878[/INST]An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. An attacker in a privileged network position may be able to leak sensitive user information.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1879[/INST]This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited..
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212256'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212257'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212258'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1880[/INST]This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: watchOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1881[/INST]An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1882[/INST]A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1883[/INST]This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted server messages may lead to heap corruption.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212530'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212531'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1884[/INST]A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. A remote attacker may be able to cause a denial of service.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212530'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212531'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1885[/INST]An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1886[/INST]Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1887[/INST]An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1888[/INST]Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1889[/INST]Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1890[/INST]Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1891[/INST]A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1892[/INST]Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1894[/INST]Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1895[/INST]Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1896[/INST]Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity
Affected Products: Snapdragon Compute, Snapdragon Connectivity
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1897[/INST]Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1898[/INST]Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1899[/INST]Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1900[/INST]Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1901[/INST]Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1903[/INST]Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin'}]
CVE State: PUBLISHED</s>


<s>[INST] <<SYS>> You are a helpful, respectful and honest assistant. Always answer as helpfully as possible, while being safe.  Your answers should not include any harmful, unethical, racist, sexist, toxic, dangerous, or illegal content. Please ensure that your responses are socially unbiased and positive in nature. If a question does not make any sense, or is not factually coherent, explain why instead of answering something not correct. If you don't know the answer to a question, please don't share false information. <</SYS>> Explain the vulnerability: CVE-2021-1904[/INST]Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED</s>