About the security content of Security Update 2021-004 Mojave - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2020-36230A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service
• CVE-2020-36229A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service
• CVE-2020-36228An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service
• CVE-2020-36227A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service
• CVE-2020-36226A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36225A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36224A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36223A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read)
• CVE-2020-36222A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service
• CVE-2020-36221Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Integer Underflow (Wrap or Wraparound)
• CVE-2021-30819An out-of-bounds read was addressed with improved input validation
• CVE-2021-30724A local attacker may be able to elevate their privileges
• CVE-2021-30728An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2021-30746An out-of-bounds read was addressed with improved input validation
• CVE-2021-30694An information disclosure issue was addressed with improved state management
• CVE-2021-30725A memory corruption issue was addressed with improved state management
• CVE-2021-30739A local attacker may be able to elevate their privileges
• CVE-2021-30738A malicious application may be able to overwrite arbitrary files
• CVE-2021-30726A malicious application may be able to execute arbitrary code with kernel privileges
• CVE-2021-30712A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2021-30735A malicious application may be able to execute arbitrary code with kernel privileges
• CVE-2021-30737A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code
• CVE-2021-30723An information disclosure issue was addressed with improved state management
• CVE-2021-30704A logic issue was addressed with improved state management
• CVE-2021-30721An attacker in a privileged network position may be able to leak sensitive user information
• CVE-2021-30691An information disclosure issue was addressed with improved state management
• CVE-2021-30693A validation issue was addressed with improved logic
• CVE-2021-30695An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-30679This issue was addressed by removing the vulnerable code
• CVE-2021-30692An information disclosure issue was addressed with improved state management
• CVE-2021-30722An attacker in a privileged network position may be able to leak sensitive user information
• CVE-2021-30697A logic issue was addressed with improved state management
• CVE-2021-30681A validation issue existed in the handling of symlinks
• CVE-2021-30705This issue was addressed with improved checks
• CVE-2021-30716An attacker in a privileged network position may be able to perform denial of service
• CVE-2021-30717An attacker in a privileged network position may be able to execute arbitrary code
• CVE-2021-30690Multiple issues in apache were addressed by updating apache to version 2.4.46
• CVE-2021-30696An attacker in a privileged network position may be able to misrepresent application state
• CVE-2021-30710A memory corruption issue was addressed with improved state management
• CVE-2021-30708An out-of-bounds read was addressed with improved input validation
• CVE-2021-30678A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2021-30683A malicious application could execute arbitrary code leading to compromise of user information
• CVE-2021-30709This issue was addressed with improved checks
• CVE-2021-30702A person with physical access to a Mac may be able to bypass Login Window
• CVE-2021-30669A malicious application may bypass Gatekeeper checks
• CVE-2021-30676A logic issue was addressed with improved state management
• CVE-2021-30687An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-1884A remote attacker may be able to cause a denial of service
• CVE-2021-1883This issue was addressed with improved checks

Source and provenance

Original title: About the security content of Security Update 2021-004 Mojave - Apple Support. Captured 16 Oct 2026, 03:33 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.