PT-2021-18795 · Apple · Security Update+2

Iryanbell + 1 · Published 2021-05-24 · Updated 2021-09-17 · CVE-2021-30671

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.4 Security Update versions prior to 2021-003 Catalina

Description A validation issue was addressed with improved logic, which could allow a malicious application to send unauthorized Apple events to Finder.

Recommendations For macOS Big Sur versions prior to 11.4, update to macOS Big Sur 11.4. For versions that require Security Update, apply Security Update 2021-003 Catalina.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-30671

Affected Products

Apple Macos

Security Update

Macos Big Sur

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-30671 · Security Note
• https://support.apple.com/en-us/HT212530 · Vendor Advisory
• https://support.apple.com/en-us/HT212529 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30671 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30671 · Note
• https://support.apple.com/en-us/103131 · Note