About the security content of macOS Big Sur 11.4 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2020-36230A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service
• CVE-2020-36229A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service
• CVE-2020-36228An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service
• CVE-2020-36227A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service
• CVE-2020-36226A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36225A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36224A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36223A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read)
• CVE-2020-36222A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service
• CVE-2020-36221Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Integer Underflow (Wrap or Wraparound)
• CVE-2021-30713Apple macOS Unspecified Vulnerability
• CVE-2021-23841Null pointer deref in X509_issuer_and_serial_hash()
• CVE-2021-30724A local attacker may be able to elevate their privileges
• CVE-2021-30728An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2021-30744Description: A cross-origin issue with iframe elements was addressed with improved tracking of security origins
• CVE-2021-30734Multiple memory corruption issues were addressed with improved memory handling
• CVE-2021-30771An out-of-bounds write was addressed with improved input validation
• CVE-2021-30746An out-of-bounds read was addressed with improved input validation
• CVE-2021-30756A local attacker may be able to view Now Playing information from the lock screen
• CVE-2021-30733An out-of-bounds read was addressed with improved input validation
• CVE-2021-30694An information disclosure issue was addressed with improved state management
• CVE-2021-30725A memory corruption issue was addressed with improved state management
• CVE-2021-30739A local attacker may be able to elevate their privileges
• CVE-2021-30740A logic issue was addressed with improved validation
• CVE-2021-30738A malicious application may be able to overwrite arbitrary files
• CVE-2021-30726A malicious application may be able to execute arbitrary code with kernel privileges
• CVE-2021-30731This issue was addressed with improved checks
• CVE-2021-30727A logic issue was addressed with improved state management
• CVE-2021-30751A malicious application may be able to bypass certain Privacy preferences
• CVE-2021-30712A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2021-30735A malicious application may be able to execute arbitrary code with kernel privileges
• CVE-2021-30671A validation issue was addressed with improved logic
• CVE-2021-30753Processing a maliciously crafted font may result in the disclosure of process memory
• CVE-2021-30749Multiple memory corruption issues were addressed with improved memory handling
• CVE-2021-30755Processing a maliciously crafted font may result in the disclosure of process memory
• CVE-2021-30737A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code
• CVE-2021-30736A buffer overflow was addressed with improved size validation
• CVE-2021-30723An information disclosure issue was addressed with improved state management
• CVE-2021-30704A logic issue was addressed with improved state management
• CVE-2021-30721An attacker in a privileged network position may be able to leak sensitive user information
• CVE-2021-30719An out-of-bounds read issue was addressed by removing the vulnerable code
• CVE-2021-30691An information disclosure issue was addressed with improved state management
• CVE-2021-30693A validation issue was addressed with improved logic
• CVE-2021-30695An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-30684A remote attacker may cause an unexpected application termination or arbitrary code execution
• CVE-2021-30718This issue was addressed with improved checks
• CVE-2021-30679This issue was addressed by removing the vulnerable code
• CVE-2021-30692An information disclosure issue was addressed with improved state management
• CVE-2021-30682A logic issue was addressed with improved restrictions
• CVE-2021-30722An attacker in a privileged network position may be able to leak sensitive user information

Source and provenance

Original title: About the security content of macOS Big Sur 11.4 - Apple Support. Captured 16 Oct 2026, 03:33 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.