PT-2021-3334 · Apple · Apple Macos

Published 2021-05-24 · Updated 2025-10-23 · CVE-2021-30713

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.4

Description A permissions issue was addressed with improved validation. This issue may allow a malicious application to bypass Privacy preferences. There is a report that this issue may have been actively exploited. The vulnerability is related to insufficient input validation, which can impact the confidentiality of protected information.

Recommendations For macOS versions prior to 11.4, update to macOS Big Sur 11.4 to fix the issue. As a temporary workaround, consider restricting access to sensitive information and Privacy preferences to minimize the risk of exploitation.

Exploit

Fix

Missing Authorization

RCE

Weakness Enumeration

CWE-862

CWE-20

Related Identifiers

BDU:2021-03141

CVE-2021-30713

Affected Products

Apple Macos

References · 23

• 🔥❌ https://github.com/AlAIAL90/CVE-2021-30713 · Exploit, Deleted
• https://bdu.fstec.ru/vul/2021-03141 · Security Note
• https://osv.dev/vulnerability/CVE-2021-30713 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30713 · Security Note
• https://support.apple.com/en-us/HT212529 · Vendor Advisory
• https://support.apple.com/kb/HT212805 · Vendor Advisory
• https://t.me/true_secator/1747 · Telegram Post
• https://t.me/true_secator/2506 · Telegram Post
• https://t.me/cvenotify/20995 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021052415 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30713 · Note
• https://twitter.com/fletch_ai/status/1900457063773594104 · Twitter Post
• https://t.me/nekaspersky/1664 · Telegram Post
• https://exploit.in/2021/14527 · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30713 · Note