Exploitation Summary
CVE-2021-1871 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021.
Description
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
References (5)
Core 5
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212147
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212146
Broken Link, Mailing List vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/
Mailing List, Third Party Advisory vendor-advisory
x_refsource_debian
https://www.debian.org/security/2021/dsa-4923
US Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1871
Scores
CVSS v3
9.8
EPSS
0.0048
EPSS Percentile
65.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
active
Automatable
yes
Technical Impact
total
Details
CISA KEV
2021-11-03
VulnCheck KEV
2021-01-26
InTheWild.io
2021-01-26
ENISA EUVD
EUVD-2021-7335
Status
published
Products (7)
apple/ipados
< 14.4
apple/iphone_os
< 14.4
apple/mac_os_x
10.15.7 (3 CPE variants)
apple/mac_os_x
10.15 - 10.15.7
apple/macos
11.0.1 - 11.2
debian/debian_linux
10.0
fedoraproject/fedora
33
Published
Apr 02, 2021
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026