About the security content of iOS 14.6 and iPadOS 14.6 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2021-23841Null pointer deref in X509_issuer_and_serial_hash()
• CVE-2021-30999The issue was addressed with improved permissions logic
• CVE-2021-30724A local attacker may be able to elevate their privileges
• CVE-2021-30744Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins
• CVE-2021-30734Multiple memory corruption issues were addressed with improved memory handling
• CVE-2021-30771An out-of-bounds write was addressed with improved input validation
• CVE-2021-30741A use after free issue was addressed with improved memory management
• CVE-2021-30746An out-of-bounds read was addressed with improved input validation
• CVE-2021-30756A local attacker may be able to view Now Playing information from the lock screen
• CVE-2021-30729A logic issue was addressed with improved restrictions
• CVE-2021-30733An out-of-bounds read was addressed with improved input validation
• CVE-2021-30694An information disclosure issue was addressed with improved state management
• CVE-2021-30725A memory corruption issue was addressed with improved state management
• CVE-2021-30740A logic issue was addressed with improved validation
• CVE-2021-30727A logic issue was addressed with improved state management
• CVE-2021-30753Processing a maliciously crafted font may result in the disclosure of process memory
• CVE-2021-30749Multiple memory corruption issues were addressed with improved memory handling
• CVE-2021-30737A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code
• CVE-2021-30736A buffer overflow was addressed with improved size validation
• CVE-2021-30723An information disclosure issue was addressed with improved state management
• CVE-2021-30704A logic issue was addressed with improved state management
• CVE-2021-30691An information disclosure issue was addressed with improved state management
• CVE-2021-30693A validation issue was addressed with improved logic
• CVE-2021-30695An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-30674This issue was addressed with improved checks
• CVE-2021-30692An information disclosure issue was addressed with improved state management
• CVE-2021-30682A logic issue was addressed with improved restrictions
• CVE-2021-30697A logic issue was addressed with improved state management
• CVE-2021-30681A validation issue existed in the handling of symlinks
• CVE-2021-30720A logic issue was addressed with improved restrictions
• CVE-2021-30706Processing a maliciously crafted image may lead to disclosure of user information
• CVE-2021-30707This issue was addressed with improved checks
• CVE-2021-30705This issue was addressed with improved checks
• CVE-2021-30677This issue was addressed with improved environment sanitization
• CVE-2021-30715A logic issue was addressed with improved state management
• CVE-2021-30698A remote attacker may be able to cause a denial of service
• CVE-2021-30710A memory corruption issue was addressed with improved state management
• CVE-2021-30685This issue was addressed with improved checks
• CVE-2021-30708An out-of-bounds read was addressed with improved input validation
• CVE-2021-30703A double free issue was addressed with improved memory management
• CVE-2021-30709This issue was addressed with improved checks
• CVE-2021-30699A window management issue was addressed with improved state management
• CVE-2021-30700This issue was addressed with improved checks
• CVE-2021-30667An attacker in WiFi range may be able to force a client to use a less secure authentication mechanism
• CVE-2021-30714A race condition was addressed with improved state handling
• CVE-2021-30701This issue was addressed with improved checks
• CVE-2021-30686An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-30689A logic issue was addressed with improved state management
• CVE-2021-30687An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-21779A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4

Source and provenance

Original title: About the security content of iOS 14.6 and iPadOS 14.6 - Apple Support. Captured 16 Oct 2026, 03:33 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.