Description
This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212003
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212009
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212004
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212006
Scores
CVSS v3
7.8
EPSS
0.0106
EPSS Percentile
60.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
Status
published
Products (3)
apple/ipados
< 14.3
apple/iphone_os
< 12.5
apple/watchos
6.0 - 6.3
Published
Apr 02, 2021
Tracked Since
Feb 18, 2026