CVE-2021-30657

high-risk

Published 2021-09-08

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..

Do I need to act?

83.1% chance of exploitation in next 30 days

EPSS score — higher than 17% of all CVEs

CISA KEV: actively exploited in the wild

On the Known Exploited Vulnerabilities catalog — federal agencies must patch

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.5/10 Medium

LOCAL / LOW complexity

Affected Products (10)

Mac Os X

Macos

Affected Vendors

Apple

References (5)

Release Notes https://support.apple.com/en-us/HT212325

Release Notes https://support.apple.com/en-us/HT212326

Release Notes https://support.apple.com/en-us/HT212325

Release Notes https://support.apple.com/en-us/HT212326

Third Party Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-...

/ 100

high-risk

Severity 18/34 · Moderate

Exploitability 27/34 · High

Exposure 16/34 · Moderate