First published: Tue Aug 24 2021(Updated: )
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.
Credit: Sergei Glazunov Google Project ZeroSergei Glazunov Google Project ZeroSergei Glazunov Google Project ZeroSergei Glazunov Google Project ZeroSergei Glazunov Google Project ZeroSergei Glazunov Google Project Zero cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPadOS | <15.2 | |
Apple iPhone OS | <15.2 | |
Apple Mac OS X | >=10.15<=10.15.7 | |
Apple Mac OS X | =10.15.7-security_update_2020 | |
Apple Mac OS X | =10.15.7-security_update_2020-001 | |
Apple Mac OS X | =10.15.7-security_update_2020-005 | |
Apple Mac OS X | =10.15.7-security_update_2020-007 | |
Apple Mac OS X | =10.15.7-security_update_2021-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-002 | |
Apple Mac OS X | =10.15.7-security_update_2021-003 | |
Apple Mac OS X | =10.15.7-security_update_2021-006 | |
Apple Mac OS X | =10.15.7-security_update_2021-007 | |
Apple macOS | >=11.0<11.6.2 | |
Apple macOS | >=12.0<12.1 | |
Apple tvOS | <15.2 | |
Apple watchOS | <8.3 | |
Apple watchOS | <8.3 | 8.3 |
Apple tvOS | <15.2 | 15.2 |
Apple iOS | <15.2 | 15.2 |
Apple iPadOS | <15.2 | 15.2 |
Apple macOS Monterey | <12.1 | 12.1 |
Apple macOS Big Sur | <11.6.2 | 11.6.2 |
Apple Catalina |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The vulnerability ID is CVE-2021-30937.
The severity of CVE-2021-30937 is not mentioned in the description.
The vulnerability affects macOS Big Sur 11.6.2, macOS Monterey 12.1, Apple Catalina, iOS up to 15.2, iPadOS up to 15.2, watchOS up to 8.3, and tvOS up to 15.2.
The vulnerability was addressed with improved locking.
More information about CVE-2021-30937 can be found at the following references: [link1](https://support.apple.com/en-us/HT212978), [link2](https://support.apple.com/en-us/HT212980), [link3](https://support.apple.com/en-us/HT212979).