CVE-2021-30832: Apple macOS CVMServer Use-After-Free Privilege Escalation Vulnerability
First published: Mon Sep 13 2021(Updated: )
A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges.
Credit: Mickey Jin @patch1t Trend Micro product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS | <11.6 | 11.6 |
| macOS Catalina | ||
| Apple iOS and macOS | >=10.15<=10.15.6 | |
| Apple iOS and macOS | =10.15.7 | |
| Apple iOS and macOS | =10.15.7-security_update_2020 | |
| Apple iOS and macOS | =10.15.7-security_update_2020-001 | |
| Apple iOS and macOS | =10.15.7-security_update_2020-005 | |
| Apple iOS and macOS | =10.15.7-security_update_2020-007 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-001 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-002 | |
| Apple iOS and macOS | =10.15.7-security_update_2021-003 | |
| Apple iOS and macOS | =10.15.7-supplemental_update | |
| Apple iOS and macOS | >=11.0<11.6 | |
| Apple iOS and macOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30811
- CVE-2021-30838
- CVE-2021-30834
- CVE-2021-30928
- CVE-2021-30860
- CVE-2021-31010
- CVE-2021-30827
- CVE-2021-30828
- CVE-2021-30829
- CVE-2021-22925
- CVE-2021-30832
- CVE-2021-30841
- CVE-2021-30842
- CVE-2021-30843
- CVE-2021-30853
- CVE-2021-30933
- CVE-2021-30835
- CVE-2021-30847
- CVE-2021-30830
- CVE-2021-30865
- CVE-2021-30857
- CVE-2021-30859
- CVE-2021-30864
- CVE-2013-0340
- CVE-2021-30813
- CVE-2021-30819
- CVE-2021-30855
- CVE-2021-30925
- CVE-2021-30850
- CVE-2021-30845
- CVE-2021-30844
- CVE-2021-30858
- CVE-2021-30783
- CVE-2020-29622
- CVE-2021-30713
Frequently Asked Questions
What is CVE-2021-30832?
CVE-2021-30832 is a memory corruption issue that was addressed with improved state management.
What software is affected by CVE-2021-30832?
macOS Big Sur version 11.6 and Catalina are affected by CVE-2021-30832.
How does CVE-2021-30832 affect macOS Big Sur?
CVE-2021-30832 affects macOS Big Sur version 11.6.
How does CVE-2021-30832 affect Catalina?
CVE-2021-30832 affects Catalina.
How can I fix CVE-2021-30832?
To fix CVE-2021-30832, ensure that you update macOS Big Sur to version 11.6 or later.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/severity
- agent/last-modified-date
- agent/references
- agent/description
- agent/trending
- agent/source
- collector/apple-support
- agent/software-canonical-lookup-request
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-22-355
- alias/ZDI-CAN-14040
- alias/CVE-2021-30832
- agent/software-canonical-lookup
- agent/author
- vendor/apple
- canonical/apple macos
- canonical/macos catalina
- canonical/apple ios and macos
- version/apple ios and macos/10.15
- version/apple ios and macos/10.15.6
- version/apple ios and macos/10.15.7
- version/apple ios and macos/10.15.7-security_update_2020
- version/apple ios and macos/10.15.7-security_update_2020-001
- version/apple ios and macos/10.15.7-security_update_2020-005
- version/apple ios and macos/10.15.7-security_update_2020-007
- version/apple ios and macos/10.15.7-security_update_2021-001
- version/apple ios and macos/10.15.7-security_update_2021-002
- version/apple ios and macos/10.15.7-security_update_2021-003
- version/apple ios and macos/10.15.7-supplemental_update
- version/apple ios and macos/11.0