PT-2021-4348 · Apple · Macos Mojave+5

Clément Lecigne + 2 · Published 2021-02-01 · Updated 2025-10-23 · CVE-2021-30869

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12.5.5 and prior to 14.4 Apple iPadOS versions prior to 14.4 Apple macOS versions prior to 11.2 Apple macOS Catalina versions prior to Security Update 2021-001 Apple macOS Mojave versions prior to Security Update 2021-001

Description A type confusion issue in the XNU kernel of Apple iOS and macOS allows a malicious application to execute arbitrary code with kernel privileges. This issue is reportedly being exploited in the wild, with threat actors using it to deliver malware to users in Hong Kong. The vulnerability can be exploited by running a specially crafted application, allowing an attacker to gain elevated privileges or execute arbitrary code.

Recommendations For Apple iOS versions prior to 12.5.5 and prior to 14.4, update to iOS 12.5.5 or later, or iOS 14.4 or later. For Apple iPadOS versions prior to 14.4, update to iPadOS 14.4 or later. For Apple macOS versions prior to 11.2, update to macOS Big Sur 11.2 or later. For Apple macOS Catalina versions prior to Security Update 2021-001, apply Security Update 2021-001 or later. For Apple macOS Mojave versions prior to Security Update 2021-001, apply Security Update 2021-001 or later.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

BDU:2021-04977

CVE-2021-30869

Affected Products

Apple Macos

Xnu Kernel

Ios

Ipados

Macos Catalina

Macos Mojave

References · 33

• https://support.apple.com/en-us/HT212147 · Vendor Advisory
• https://support.apple.com/en-us/HT212824 · Vendor Advisory
• https://support.apple.com/en-us/HT212146 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30869 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/669783 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/669784 · Security Note
• https://support.apple.com/en-us/HT212825 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30869 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04977 · Security Note
• https://github.com/Old-Man-Programmer/tree · Note
• https://support.apple.com/en-us/103124 · Note
• https://t.me/aptreports/11326 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30869 · Note
• https://t.me/defcon_news/85860 · Telegram Post
• https://t.me/cvenotify/114726 · Telegram Post