CVE-2021-1849

HIGH

iPadOS < 14.5 - Improper Verification of Cryptographic Signature

Title source: llm
STIX 2.1

Description

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212317
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212323
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212324
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212325

Scores

CVSS v3 7.5
EPSS 0.0092
EPSS Percentile 55.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-347
Status published
Products (5)
apple/ipados < 14.5
apple/iphone_os < 14.5
apple/macos 11.0 - 11.3
apple/tvos < 14.5
apple/watchos < 7.4
Published Sep 08, 2021
Tracked Since Feb 18, 2026