CVE-2021-30798

HIGH

iPhone OS < 14.7, macOS < 11.5, watchOS < 7.6 - Privacy Preference Bypass

Title source: llm

Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6. A malicious application may be able to bypass certain Privacy preferences.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212601

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212602

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212605

Scores

CVSS v3 7.5

EPSS 0.0177

EPSS Percentile 75.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (3)

apple/iphone_os < 14.7

apple/macos < 11.5

apple/watchos < 7.6

Published Sep 08, 2021

Tracked Since Feb 18, 2026