PT-2021-18796 · Apple · Apple Macos+1

Say2 · Published 2021-05-24 · Updated 2021-09-16 · CVE-2021-30672

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.4 Security Update versions prior to 2021-004 Catalina Security Update versions prior to 2021-005 Mojave

Description A memory corruption issue was addressed with improved state management. This issue allows a malicious application to potentially gain root privileges.

Recommendations For macOS versions prior to 11.4, update to macOS Big Sur 11.4. For Security Update versions prior to 2021-004 Catalina, apply Security Update 2021-004 Catalina. For Security Update versions prior to 2021-005 Mojave, apply Security Update 2021-005 Mojave.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-30672

Affected Products

Apple Macos

Security Update

References · 8

• https://support.apple.com/en-us/HT212603 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30672 · Security Note
• https://support.apple.com/en-us/HT212600 · Vendor Advisory
• https://support.apple.com/en-us/HT212529 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30672 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30672 · Note
• https://support.apple.com/en-us/103131 · Note
• https://t.me/cvenotify/21007 · Telegram Post