CVE-2021-31010

Published: Aug 24, 2021Modified: Jun 17, 2026CISA KEV

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..

Affected (22)

Products: Apple: Ipados, Iphone Os, Mac Os X, Macos, Watchos

5 products

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	version < 14.8
Apple Iphone Os	12.0 ≤ version < 12.5.5
Apple Iphone Os	14.0 ≤ version < 14.8
Apple Mac Os X	10.15 ≤ version < 10.15.7
Apple Mac Os X	Version 10.15.7
Apple Mac Os X	Version 10.15.7 security_update_2020-001
Apple Mac Os X	Version 10.15.7 security_update_2020-005
Apple Mac Os X	Version 10.15.7 security_update_2020-007
Apple Mac Os X	Version 10.15.7 security_update_2020
Apple Mac Os X	Version 10.15.7 security_update_2021-001
Apple Mac Os X	Version 10.15.7 security_update_2021-002
Apple Mac Os X	Version 10.15.7 security_update_2021-003
Apple Mac Os X	Version 10.15.7 security_update_2021-006
Apple Mac Os X	Version 10.15.7 security_update_2021-007
Apple Mac Os X	Version 10.15.7 security_update_2021-008
Apple Mac Os X	Version 10.15.7 security_update_2022-001
Apple Mac Os X	Version 10.15.7 security_update_2022-002
Apple Mac Os X	Version 10.15.7 security_update_2022-003
Apple Mac Os X	Version 10.15.7 security_update_2022-004
Apple Mac Os X	Version 10.15.7 supplemental_update
Apple Macos	11.0 ≤ version < 11.6
Apple Watchos	version < 7.6.2