CVE-2021-1863

An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number.

• CWE-287

• https://support.apple.com/en-us/HT212317Vendor Advisory
• https://support.apple.com/en-us/HT212317Vendor Advisory

Published

Sep 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1857A memory initialization issue was addressed with improved me…6.5
• CVE-2021-1858Processing a maliciously crafted image may lead to arbitrary…7.8
• CVE-2021-1859A logic issue was addressed with improved state management. …7.5
• CVE-2021-1860A memory initialization issue was addressed with improved me…6.5
• CVE-2021-1861An issue existed in determining cache occupancy. The issue w…4.3
• CVE-2021-1862Description: A person with physical access may be able to ac…2.4
• CVE-2021-1864A use after free issue was addressed with improved memory ma…9.8
• CVE-2021-1865An issue obscuring passwords in screenshots was addressed wi…5
• CVE-2021-1867An out-of-bounds read was addressed with improved input vali…8.8
• CVE-2021-1868A logic issue was addressed with improved state management. …7.8
• CVE-2021-1870A logic issue was addressed with improved restrictions. This…9.8
• CVE-2021-1871A logic issue was addressed with improved restrictions. This…9.8