Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2021-1806
HistoryApr 02, 2021 - 7:15 p.m.

CVE-2021-1806

2021-04-0219:15:00
CWE-362
[email protected]
web.nvd.nist.gov
63
6
cve-2021-1806
macos
update
race condition
kernel privileges
security vulnerability

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

50.8%

JSON

A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel privileges.

VendorProductVersionCPE
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Social References

More

Related

zdi 4
prion 1
openvas 2
nessus 2
thn 1
apple 3
zdi
zdi
Apple macOS process_token_BlitLibSetup2D Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
2021-02-24 00:00:00
Apple macOS process_token_BindQueryStoreRegisterToMemoryList Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
2021-02-24 00:00:00
Apple macOS process_token_BindQueryBufferMultiple Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
2021-02-24 00:00:00
prion
prion
Race condition
2021-04-02 19:15:00
openvas
openvas
Apple Mac OS X Security Update (HT212177)-01
2022-09-22 00:00:00
Apple Mac OS X Security Update (HT212327)
2022-09-22 00:00:00
nessus
nessus
macOS 10.14.x < 10.14.6 Security Update 2021-002 / 10.15.x < 10.15.7 Supplemental Update / macOS 11.x < 11.2.1 (HT212177)
2021-02-11 00:00:00
macOS 10.14.x < 10.14.6 Security Update 2021-003 Mojave (HT212327)
2021-04-28 00:00:00
thn
thn
Apple Patches 10-Year-Old macOS SUDO Root Privilege Escalation Bug
2021-02-10 10:23:00
apple
apple
About the security content of macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security Update 2021-002 - Apple Support
2021-02-09 06:28:25
About the security content of macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security Update 2021-002
2021-02-09 00:00:00
About the security content of Security Update 2021-003 Mojave
2021-04-26 00:00:00

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

50.8%

JSON
Related for CVE-2021-1806
zdi4prion1openvas2nessus2thn1apple3