← Back

CVE-2021-1782

nvd nist
Published: Apr 2, 2021Modified: Oct 23, 2025CISA KEV

JSON object

Loading...
7.0
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.0 / Impact: 5.9
Source: NVD

Description

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited..

Affected (23)

6 products
Ipados
Iphone Os
Mac Os X
Macos
Tvos
Watchos
Configuration A
23 vulnerable
Vulnerable SoftwareAffected Versions
Before 14.4
Before 14.4
Apple
From 10.14 to 10.14.6
From 10.15 to 10.15.7
Version 10.14.6
Version 10.14.6 security_update_2019-004
Version 10.14.6 security_update_2019-005
Version 10.14.6 security_update_2019-006
Version 10.14.6 security_update_2019-007
Version 10.14.6 security_update_2020-001
Version 10.14.6 security_update_2020-002
Version 10.14.6 security_update_2020-003
Version 10.14.6 security_update_2020-004
Version 10.14.6 security_update_2020-005
Version 10.14.6 security_update_2020-006
Version 10.14.6 security_update_2020-007
Version 10.14.6 supplemental_update
Version 10.14.6 supplemental_update_2
Version 10.15.7
Version 10.15.7 supplemental_update
From 11.0 to 11.2
Before 14.4
Before 7.3

References (9)

Source: product-security@apple.com
Release NotesVendor Advisory
Source: product-security@apple.com
Release NotesVendor Advisory
Source: product-security@apple.com
Release NotesVendor Advisory
Source: product-security@apple.com
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.