CVE-2021-30803
First published: Wed Jul 21 2021(Updated: )
A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access a user’s recent Contacts.
Credit: product-security@apple.com Matt Shockley (twitter.com/mattshockl) Csaba Fitzl @theevilbit Offensive Security
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS Big Sur | <11.5 | 11.5 |
| Apple macOS | >=11.0<11.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212602 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30805
- CVE-2021-30871
- CVE-2021-30790
- CVE-2021-31006
- CVE-2021-30781
- CVE-2021-30748
- CVE-2021-30775
- CVE-2021-30776
- CVE-2021-30786
- CVE-2021-30772
- CVE-2021-30783
- CVE-2021-30777
- CVE-2021-30789
- CVE-2021-30774
- CVE-2021-30780
- CVE-2021-30768
- CVE-2021-30817
- CVE-2021-30804
- CVE-2021-30760
- CVE-2021-30788
- CVE-2021-30759
- CVE-2021-30803
- CVE-2021-30779
- CVE-2021-30785
- CVE-2021-30787
- CVE-2021-30766
- CVE-2021-30765
- CVE-2021-30784
- CVE-2021-30793
- CVE-2021-30778
- CVE-2021-30677
- CVE-2021-3518
- CVE-2021-30796
- CVE-2021-30792
- CVE-2021-30791
- CVE-2021-1821
- CVE-2021-30782
- CVE-2021-31004
- CVE-2021-30798
- CVE-2021-30758
- CVE-2021-30795
- CVE-2021-30797
- CVE-2021-30799
Frequently Asked Questions
What is the vulnerability ID for the permissions issue in Identity Services?
The vulnerability ID for the permissions issue in Identity Services is CVE-2021-30803.
What software is affected by the permissions issue in Identity Services?
The permissions issue in Identity Services affects Apple macOS Big Sur version up to and excluding 11.5.
How was the permissions issue in Identity Services addressed?
The permissions issue in Identity Services was addressed by improving validation.
What is the severity of CVE-2021-30803?
The severity of CVE-2021-30803 is not specified.
How can I fix the permissions issue in Identity Services?
To fix the permissions issue in Identity Services, update to macOS Big Sur version 11.5 or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/references
- agent/last-modified-date
- agent/description
- agent/event
- agent/tags
- agent/trending
- vendor/apple
- canonical/apple macos
- version/apple macos/11.0
- canonical/apple macos big sur