PT-2021-8247 · Apple · Macos Monterey+2

Jonathan Bar Or · Published 2021-08-24 · Updated 2025-07-30 · CVE-2021-30970

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.1 macOS Big Sur versions prior to 11.6.2

Description A logic issue was addressed with improved state management, allowing a malicious application to bypass Privacy preferences. This issue may lead to data leakage. A malicious actor may be able to gain access to user data by exploiting this issue, potentially allowing them to listen to the microphone, take screenshots, and gain full access to the device.

Recommendations For macOS versions prior to 12.1, update to macOS Monterey 12.1 or later. For macOS Big Sur versions prior to 11.6.2, update to macOS Big Sur 11.6.2 or later.

Fix

Weakness Enumeration

CWE-371

Related Identifiers

BDU:2025-00702

CVE-2021-30970

Affected Products

Apple Macos

Macos Big Sur

Macos Monterey

References · 17

• https://bdu.fstec.ru/vul/2025-00702 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-30970 · Security Note
• https://osv.dev/vulnerability/CVE-2021-30970 · Vendor Advisory
• https://support.apple.com/en-us/HT212978 · Note
• https://support.apple.com/en-us/102874 · Note
• https://t.me/nekaspersky/1664 · Telegram Post
• https://t.me/tomhunter/684 · Telegram Post
• https://vulners.com/cve/CVE-2021-30970 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30970 · Note
• https://t.me/thehackernews/1780 · Telegram Post
• https://t.me/cibsecurity/27812 · Telegram Post
• https://support.apple.com/en-us/102876 · Note
• https://t.me/defcon_news/93259 · Telegram Post
• https://twitter.com/wtsdev/status/1950360425805066497 · Twitter Post
• https://t.me/pentestingnews/16920 · Telegram Post