First published: Mon Apr 26 2021(Updated: )
An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. The issue was addressed with improved permissions logic.
Credit: Gary Nield ECSC Group plcTim Michaud @TimGMichaud Zoom Video CommunicationsWojciech Reguła @_r3ggi SecuRing product-security@apple.com Gary Nield ECSC Group plcTim Michaud @TimGMichaud Zoom Video CommunicationsWojciech Reguła @_r3ggi SecuRing
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Big Sur | <11.3 | 11.3 |
Apple Catalina | ||
Apple Mac OS X | >=10.15<=10.15.5 | |
Apple Mac OS X | =10.15.6 | |
Apple Mac OS X | =10.15.6-supplemental_update | |
Apple Mac OS X | =10.15.7 | |
Apple Mac OS X | =10.15.7-security_update_2020 | |
Apple Mac OS X | =10.15.7-security_update_2020-001 | |
Apple Mac OS X | =10.15.7-security_update_2020-005 | |
Apple Mac OS X | =10.15.7-security_update_2020-007 | |
Apple Mac OS X | =10.15.7-security_update_2021-001 | |
Apple Mac OS X | =10.15.7-supplemental_update | |
Apple macOS | >=11.0<11.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-30655 is a vulnerability in Wi-Fi where an application may be able to execute arbitrary code with system privileges.
CVE-2021-30655 affects Apple Catalina and Apple macOS Big Sur up to version 11.3.
To fix CVE-2021-30655, update your Apple macOS Big Sur to version 11.3 or later.
You can find more information about CVE-2021-30655 on the Apple support website.