CVE-2021-30770
First published: Mon Jul 19 2021(Updated: )
A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
Credit: Linus Henze (pinauten.de) Linus Henze (pinauten.de) product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPhone OS | <14.7 | |
| Apple tvOS | <14.7 | |
| Apple watchOS | <7.6 | |
| Apple watchOS | <7.6 | 7.6 |
| Apple tvOS | <14.7 | 14.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30763
- CVE-2021-30871
- CVE-2021-31006
- CVE-2021-30781
- CVE-2021-30775
- CVE-2021-30776
- CVE-2021-30789
- CVE-2021-30774
- CVE-2021-30780
- CVE-2021-30768
- CVE-2021-30760
- CVE-2021-30788
- CVE-2021-30759
- CVE-2021-30773
- CVE-2021-30779
- CVE-2021-30785
- CVE-2021-30769
- CVE-2021-30770
- CVE-2021-3518
- CVE-2021-1821
- CVE-2021-30798
- CVE-2021-30758
- CVE-2021-30795
- CVE-2021-30797
- CVE-2021-30748
- CVE-2021-30802
Frequently Asked Questions
What is CVE-2021-30770?
CVE-2021-30770 is a vulnerability in the Kernel that was addressed with improved validation.
Which software is affected by CVE-2021-30770?
The affected software includes Apple watchOS up to version 7.6 and Apple tvOS up to version 14.7.
How can I fix CVE-2021-30770?
To fix CVE-2021-30770, update your Apple watchOS to version 7.6 or later and Apple tvOS to version 14.7 or later.
Where can I find more information about CVE-2021-30770?
You can find more information about CVE-2021-30770 in the following references: [Apple Support Article 1](https://support.apple.com/en-us/HT212604) and [Apple Support Article 2](https://support.apple.com/en-us/HT212605).
What is the severity of CVE-2021-30770?
The severity of CVE-2021-30770 has not been specified.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple watchos
- canonical/apple iphone os
- canonical/apple tvos