CVE-2021-30740

HIGH

Apple OSes - Kernel Code Execution by Malicious Application

Title source: manual

Description

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. A malicious application may be able to execute arbitrary code with kernel privileges.

References (4)

Core 4

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212528

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212529

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212532

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212533

Scores

CVSS v3 7.8

EPSS 0.0154

EPSS Percentile 72.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published

Products (5)

apple/ipados < 14.6

apple/iphone_os < 14.6

apple/macos 11.0.1 - 11.4

apple/tvos < 14.6

apple/watchos < 7.5

Published Sep 08, 2021

Tracked Since Feb 18, 2026