CVE-2021-1769

Published: Apr 2, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Affected (23)

Products: Apple: Ipados, Iphone Os, Mac Os X, Macos, Tvos, Watchos

6 products

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 14.4
Apple Iphone Os	Before 14.4
Apple Mac Os X	From 10.14 to 10.14.6
Apple Mac Os X	From 10.15 to 10.15.7
Apple Mac Os X	Version 10.14.6
Apple Mac Os X	Version 10.14.6 security_update_2019-004
Apple Mac Os X	Version 10.14.6 security_update_2019-005
Apple Mac Os X	Version 10.14.6 security_update_2019-006
Apple Mac Os X	Version 10.14.6 security_update_2019-007
Apple Mac Os X	Version 10.14.6 security_update_2020-001
Apple Mac Os X	Version 10.14.6 security_update_2020-002
Apple Mac Os X	Version 10.14.6 security_update_2020-003
Apple Mac Os X	Version 10.14.6 security_update_2020-004
Apple Mac Os X	Version 10.14.6 security_update_2020-005
Apple Mac Os X	Version 10.14.6 security_update_2020-006
Apple Mac Os X	Version 10.14.6 security_update_2020-007
Apple Mac Os X	Version 10.14.6 supplemental_update
Apple Mac Os X	Version 10.14.6 supplemental_update_2
Apple Mac Os X	Version 10.15.7
Apple Mac Os X	Version 10.15.7 supplemental_update
Apple Macos	From 11.0 to 11.2
Apple Tvos	Before 14.4
Apple Watchos	Before 7.3