About the security content of macOS Big Sur 11.3 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2020-8286curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response
• CVE-2020-8285curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing
• CVE-2020-8284https://github.com/curl/curl: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2021-30661Apple Multiple Products WebKit Storage Use-After-Free Vulnerability
• CVE-2021-30657Apple macOS Unspecified Vulnerability
• CVE-2020-8037ppp decapsulator can be convinced to allocate a large amount of memory
• CVE-2020-7463n/a FreeBSD — Use After Free
• CVE-2021-30856A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences
• CVE-2021-30743An out-of-bounds write was addressed with improved input validation
• CVE-2021-30752Processing a maliciously crafted image may lead to arbitrary code execution
• CVE-2021-30750The issue was addressed with improved permissions logic
• CVE-2021-30660An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-30659A validation issue was addressed with improved logic
• CVE-2021-30658A malicious application may bypass Gatekeeper checks
• CVE-2021-30655An application may be able to execute arbitrary code with system privileges
• CVE-2021-30652A race condition was addressed with additional validation
• CVE-2021-30664An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2021-30653This issue was addressed with improved checks
• CVE-2021-1824This issue was addressed with improved entitlements
• CVE-2021-1820A memory initialization issue was addressed with improved memory handling
• CVE-2021-1841A malicious application may be able to execute arbitrary code with kernel privileges
• CVE-2021-1876A use after free issue was addressed with improved memory management
• CVE-2021-1860A memory initialization issue was addressed with improved memory handling
• CVE-2021-1853A local attacker may be able to elevate their privileges
• CVE-2021-1867An out-of-bounds read was addressed with improved input validation
• CVE-2021-1884A remote attacker may be able to cause a denial of service
• CVE-2021-1858Processing a maliciously crafted image may lead to arbitrary code execution
• CVE-2021-1872A logic issue was addressed with improved state management
• CVE-2021-1855A logic issue was addressed with improved state management
• CVE-2021-1880This issue was addressed with improved checks
• CVE-2021-1811A logic issue was addressed with improved state management
• CVE-2021-1859A logic issue was addressed with improved state management
• CVE-2021-1857A memory initialization issue was addressed with improved memory handling
• CVE-2021-1883This issue was addressed with improved checks
• CVE-2021-1813A validation issue was addressed with improved logic
• CVE-2021-1881An out-of-bounds read was addressed with improved input validation
• CVE-2021-1882A memory corruption issue was addressed with improved validation
• CVE-2021-1829A type confusion issue was addressed with improved state handling
• CVE-2021-1868A local attacker may be able to elevate their privileges
• CVE-2021-1817A memory corruption issue was addressed with improved state management
• CVE-2021-1810A malicious application may bypass Gatekeeper checks
• CVE-2021-1847A memory corruption issue was addressed with improved validation
• CVE-2021-1814This issue was addressed with improved checks
• CVE-2021-1885An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-1878An integer overflow was addressed with improved input validation
• CVE-2021-1825Processing maliciously crafted web content may lead to a cross site scripting attack
• CVE-2021-1851A logic issue was addressed with improved state management
• CVE-2021-1828A memory corruption issue was addressed with improved validation
• CVE-2021-1873An API issue in Accessibility TCC permissions was addressed with improved state management
• CVE-2021-1826A logic issue was addressed with improved restrictions

Source and provenance

Original title: About the security content of macOS Big Sur 11.3 - Apple Support. Captured 16 Oct 2026, 09:25 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.