2 lines
6.3 KiB
JSON
2 lines
6.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"14.4","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"11.2","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*","matchCriteriaId":"17AAEA98-4C05-496E-81A7-AC031FCDDDA5","versionEndExcluding":"14.4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","matchCriteriaId":"062166D7-2444-4022-B7E4-13884C43EDCA","versionEndExcluding":"14.4","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"6DE2B03F-94EE-4E32-B366-FE31A7031403","versionEndExcluding":"10.14.6","versionStartIncluding":"10.14","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"DB8A73F8-3074-4B32-B9F6-343B6B1988C5","versionEndExcluding":"10.15.7","versionStartIncluding":"10.15","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*","matchCriteriaId":"693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*","matchCriteriaId":"A369D48B-6A0A-47AE-9513-D5E2E6F30931","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*","matchCriteriaId":"510F8317-94DA-498E-927A-83D5F41AF54A","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*","matchCriteriaId":"0D5D1970-6D2A-42CA-A203-42023D71730D","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*","matchCriteriaId":"C68AE52B-5139-40A4-AE9A-E752DBF07D1B","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*","matchCriteriaId":"0FD3467D-7679-479F-9C0B-A93F7CD0929D","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*","matchCriteriaId":"D4C6098E-EDBD-4A85-8282-B2E9D9333872","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*","matchCriteriaId":"518BB47B-DD76-4E8C-9F10-7EBC1E146191","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*","matchCriteriaId":"63940A55-D851-46EB-9668-D82BEFC1FE95","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*","matchCriteriaId":"68C7A97A-3801-44FA-96CA-10298FA39883","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*","matchCriteriaId":"6D69914D-46C7-4A0E-A075-C863C1692D33","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*","matchCriteriaId":"9CDB4476-B521-43E4-A129-8718A8E0A8CD","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*","matchCriteriaId":"2C88BD98-46F5-447F-963A-FB9B167E31BE","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*","matchCriteriaId":"C7A0615B-D958-4BBF-B53F-AA839A0FE845","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*","matchCriteriaId":"A654B8A2-FC30-4171-B0BB-366CD7ED4B6A","vulnerable":true},{"criteria":"cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*","matchCriteriaId":"C1C795B9-E58D-467C-83A8-2D45C792292F","vulnerable":true},{"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","matchCriteriaId":"9B0973F4-D921-4060-9384-43D176F26967","versionEndExcluding":"11.2","versionStartIncluding":"11.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A malicious application may be able to leak sensitive user information."},{"lang":"es","value":"Se presentó un problema de privacidad en el manejo de las tarjetas de contacto. Esto se solucionó con una administración de estado mejorada. Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4. Una aplicación maliciosa puede ser capaz de filtrar información confidencial del usuario."}],"id":"CVE-2021-1781","lastModified":"2026-06-17T03:32:32.923","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":4.3,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-04-02T18:15:21.310","references":[{"source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212146"},{"source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212147"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212146"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://support.apple.com/en-us/HT212147"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|