A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A local user may be able to read arbitrary files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Icloud | Apple | * | 11.5 (excluding) |
| Itunes | Apple | * | 12.11 (excluding) |
| Ipados | Apple | * | 14.2 (excluding) |
| Iphone_os | Apple | * | 14.2 (excluding) |
| Mac_os_x | Apple | * | 11.0.1 (excluding) |
| Mac_os_x | Apple | 10.14 (including) | 10.14.6 (excluding) |
| Mac_os_x | Apple | 10.15 (including) | 10.15.7 (excluding) |
| Mac_os_x | Apple | 10.14.6 (including) | 10.14.6 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-001 (including) | 10.14.6-security_update_2019-001 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-002 (including) | 10.14.6-security_update_2019-002 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-004 (including) | 10.14.6-security_update_2019-004 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-005 (including) | 10.14.6-security_update_2019-005 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-006 (including) | 10.14.6-security_update_2019-006 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-007 (including) | 10.14.6-security_update_2019-007 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-001 (including) | 10.14.6-security_update_2020-001 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-002 (including) | 10.14.6-security_update_2020-002 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-003 (including) | 10.14.6-security_update_2020-003 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-004 (including) | 10.14.6-security_update_2020-004 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-005 (including) | 10.14.6-security_update_2020-005 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-006 (including) | 10.14.6-security_update_2020-006 (including) |
| Mac_os_x | Apple | 10.15.7 (including) | 10.15.7 (including) |
| Mac_os_x | Apple | 10.15.7-security_update_2020 (including) | 10.15.7-security_update_2020 (including) |
| Tvos | Apple | * | 14.2 (excluding) |
| Watchos | Apple | * | 7.1 (excluding) |
References
- http://seclists.org/fulldisclosure/2020/Dec/26
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://support.apple.com/en-us/HT211928
- https://support.apple.com/en-us/HT211929
- https://support.apple.com/en-us/HT211930
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/en-us/HT211933
- https://support.apple.com/en-us/HT211935
- https://support.apple.com/kb/HT212011
- http://seclists.org/fulldisclosure/2020/Dec/26
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://support.apple.com/en-us/HT211928
- https://support.apple.com/en-us/HT211929
- https://support.apple.com/en-us/HT211930
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/en-us/HT211933
- https://support.apple.com/en-us/HT211935
- https://support.apple.com/kb/HT212011