CVE-2021-30713: high-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A malicious app could bypass your Mac's privacy settings to access protected information without permission. This flaw allowed apps to circumvent the security controls that normally ask for your consent.
CWE-862 authorization bypass in macOS Big Sur prior to 11.4 allowed a local attacker with application execution capability to circumvent privacy preference validation. The vulnerability enabled unauthorized access to protected user data by bypassing entitlement checks, with evidence of active exploitation in the wild.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.