medium5.5
CVE-2021-1781
A privacy issue existed in the handling of Contact cards.
Impact
A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A malicious application may be able to leak sensitive user information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 14.4 |
| Apple | Iphone Os | before 14.4 |
| Apple | Mac Os X | from 10.14 before 10.14.6 from 10.15 before 10.15.7 Versions 10.14.6, 10.15.7 |
| Apple | Macos | from 11.0 before 11.2 |