Lucene search

[email protected]NVD:CVE-2021-30972

HistoryAug 24, 2021 - 7:15 p.m.

CVE-2021-30972

2021-08-2419:15:22

CWE-863

[email protected]

web.nvd.nist.gov

improvement

privacy preferences

security update

macos

malicious application

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

17.3%

JSON

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences.

Affected configurations

Nvd

Node

applemac_os_xRange10.15–10.15.7

applemac_os_xMatch10.15.7-

applemac_os_xMatch10.15.7security_update_2020

applemac_os_xMatch10.15.7security_update_2020-001

applemac_os_xMatch10.15.7security_update_2020-005

applemac_os_xMatch10.15.7security_update_2020-007

applemac_os_xMatch10.15.7security_update_2021-001

applemac_os_xMatch10.15.7security_update_2021-002

applemac_os_xMatch10.15.7security_update_2021-003

applemac_os_xMatch10.15.7security_update_2021-006

applemac_os_xMatch10.15.7security_update_2021-007

applemac_os_xMatch10.15.7security_update_2021-008

applemacosRange11.0–11.6.3

applemacosMatch12.0.0

applemacosMatch12.0.1

VendorProductVersionCPE
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:-::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006::::::

Rows per page:

1-10 of 151

References

support.apple.com/en-us/HT213055

support.apple.com/en-us/HT213056

support.apple.com/kb/HT212978

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

17.3%

JSON

Related for NVD:CVE-2021-30972

cvelist1 prion1 cve1 nessus3 apple3 openvas2