CVE Vulnerabilities

CVE-2021-30655

Published: Sep 08, 2021 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. The issue was addressed with improved permissions logic.

Affected Software

NameVendorStart VersionEnd Version
Mac_os_xApple10.15 (including)10.15.5 (including)
Mac_os_xApple10.15.6 (including)10.15.6 (including)
Mac_os_xApple10.15.6-supplemental_update (including)10.15.6-supplemental_update (including)
Mac_os_xApple10.15.7 (including)10.15.7 (including)
Mac_os_xApple10.15.7-security_update_2020 (including)10.15.7-security_update_2020 (including)
Mac_os_xApple10.15.7-security_update_2020-001 (including)10.15.7-security_update_2020-001 (including)
Mac_os_xApple10.15.7-security_update_2020-005 (including)10.15.7-security_update_2020-005 (including)
Mac_os_xApple10.15.7-security_update_2020-007 (including)10.15.7-security_update_2020-007 (including)
Mac_os_xApple10.15.7-security_update_2021-001 (including)10.15.7-security_update_2021-001 (including)
Mac_os_xApple10.15.7-supplemental_update (including)10.15.7-supplemental_update (including)
MacosApple11.0 (including)11.3 (excluding)

References