PT-2021-18853 · Apple · Ios+3

Gorelics · Published 2021-12-13 · Updated 2022-01-05 · CVE-2021-30767

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.6.2 macOS Monterey versions prior to 12.1 macOS Catalina versions prior to Security Update 2021-008 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3

Description A logic issue was addressed with improved state management, allowing a local user to potentially modify protected parts of the file system.

Recommendations For macOS Big Sur, update to version 11.6.2 or later. For macOS Monterey, update to version 12.1 or later. For macOS Catalina, apply Security Update 2021-008 or later. For iOS, update to version 15.2 or later. For iPadOS, update to version 15.2 or later. For watchOS, update to version 8.3 or later.

Fix

Related Identifiers

CVE-2021-30767

Affected Products

Apple Macos

Ios

Ipados

Watchos

References · 11

• https://support.apple.com/en-us/HT212979 · Vendor Advisory
• https://support.apple.com/en-us/HT212978 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30767 · Vendor Advisory
• https://support.apple.com/en-us/HT212976 · Vendor Advisory
• https://support.apple.com/en-us/HT212975 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30767 · Security Note
• https://support.apple.com/en-us/HT212981 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30767 · Note
• https://support.apple.com/en-us/102876 · Note
• https://support.apple.com/en-us/102874 · Note
• https://t.me/cvenotify/24844 · Telegram Post