The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A local attacker may be able to elevate their privileges.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.14 (including) | 10.14 (including) |
| Mac_os_x | Apple | 10.14.0 (including) | 10.14.0 (including) |
| Mac_os_x | Apple | 10.14.1 (including) | 10.14.1 (including) |
| Mac_os_x | Apple | 10.14.2 (including) | 10.14.2 (including) |
| Mac_os_x | Apple | 10.14.3 (including) | 10.14.3 (including) |
| Mac_os_x | Apple | 10.14.4 (including) | 10.14.4 (including) |
| Mac_os_x | Apple | 10.14.4-beta4 (including) | 10.14.4-beta4 (including) |
| Mac_os_x | Apple | 10.14.5 (including) | 10.14.5 (including) |
| Mac_os_x | Apple | 10.14.6 (including) | 10.14.6 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-001 (including) | 10.14.6-security_update_2019-001 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-002 (including) | 10.14.6-security_update_2019-002 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-004 (including) | 10.14.6-security_update_2019-004 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-005 (including) | 10.14.6-security_update_2019-005 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-006 (including) | 10.14.6-security_update_2019-006 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-007 (including) | 10.14.6-security_update_2019-007 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-001 (including) | 10.14.6-security_update_2020-001 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-002 (including) | 10.14.6-security_update_2020-002 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-003 (including) | 10.14.6-security_update_2020-003 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-004 (including) | 10.14.6-security_update_2020-004 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-005 (including) | 10.14.6-security_update_2020-005 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-006 (including) | 10.14.6-security_update_2020-006 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-007 (including) | 10.14.6-security_update_2020-007 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2021-001 (including) | 10.14.6-security_update_2021-001 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2021-002 (including) | 10.14.6-security_update_2021-002 (including) |
| Mac_os_x | Apple | 10.15 (including) | 10.15 (including) |
| Mac_os_x | Apple | 10.15.1 (including) | 10.15.1 (including) |
| Mac_os_x | Apple | 10.15.2 (including) | 10.15.2 (including) |
| Mac_os_x | Apple | 10.15.3 (including) | 10.15.3 (including) |
| Mac_os_x | Apple | 10.15.4 (including) | 10.15.4 (including) |
| Mac_os_x | Apple | 10.15.5 (including) | 10.15.5 (including) |
| Mac_os_x | Apple | 10.15.6 (including) | 10.15.6 (including) |
| Mac_os_x | Apple | 10.15.6-supplemental_update (including) | 10.15.6-supplemental_update (including) |
| Mac_os_x | Apple | 10.15.7 (including) | 10.15.7 (including) |
| Mac_os_x | Apple | 10.15.7-security_update_2020 (including) | 10.15.7-security_update_2020 (including) |
| Mac_os_x | Apple | 10.15.7-security_update_2020-001 (including) | 10.15.7-security_update_2020-001 (including) |
| Mac_os_x | Apple | 10.15.7-security_update_2020-005 (including) | 10.15.7-security_update_2020-005 (including) |
| Mac_os_x | Apple | 10.15.7-security_update_2020-007 (including) | 10.15.7-security_update_2020-007 (including) |
| Mac_os_x | Apple | 10.15.7-security_update_2021-001 (including) | 10.15.7-security_update_2021-001 (including) |
| Macos | Apple | 11.0 (including) | 11.3 (excluding) |