PT-2021-18786 · Apple · Apple Macos

Gary Nield + 4 · Published 2021-04-26 · Updated 2021-09-20 · CVE-2021-30655

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.3 macOS Catalina versions prior to Security Update 2021-002

Description An application may be able to execute arbitrary code with system privileges. The issue was addressed with improved permissions logic.

Recommendations For macOS Big Sur, update to version 11.3 or later. For macOS Catalina, apply Security Update 2021-002 or later.

Fix

Related Identifiers

CVE-2021-30655

Affected Products

Apple Macos

References · 7

• https://support.apple.com/en-us/HT212326 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30655 · Vendor Advisory
• https://support.apple.com/en-us/HT212325 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30655 · Security Note
• https://t.me/cibsecurity/28466 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30655 · Note
• https://support.apple.com/en-us/103126 · Note