CVE-2021-30713
CVE-2021-30713
In short
A malicious app could bypass your Mac's privacy settings to access protected information without permission. This flaw allowed apps to circumvent the security controls that normally ask for your consent.
Technical detail
CWE-862 authorization bypass in macOS Big Sur prior to 11.4 allowed a local attacker with application execution capability to circumvent privacy preference validation. The vulnerability enabled unauthorized access to protected user data by bypassing entitlement checks, with evidence of active exploitation in the wild.
Summary generated and translated by AI from the official description.
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.4. A malicious application may be able to bypass Privacy preferences. Apple is aware of a report that this issue may have been actively exploited..
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Apple · macOSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →