CVE-2021-30944: SQL Injection
First published: Tue Aug 24 2021(Updated: )
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious app may be able to access data from other apps by enabling additional logging.
Credit: Wojciech Reguła @_r3ggi SecuRingWojciech Reguła @_r3ggi SecuRingWojciech Reguła @_r3ggi SecuRingWojciech Reguła @_r3ggi SecuRing cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple watchOS | <8.3 | 8.3 |
| Apple iOS | <15.2 | 15.2 |
| Apple iPadOS | <15.2 | 15.2 |
| Apple macOS Monterey | <12.1 | 12.1 |
| Apple tvOS | <15.2 | 15.2 |
| Apple iPadOS | <15.2 | |
| Apple iPhone OS | <15.2 | |
| Apple macOS | >=12.0.0<12.1 | |
| Apple tvOS | <15.2 | |
| Apple watchOS | <8.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212975 (Advisory)
- https://support.apple.com/en-us/HT212976 (Advisory)
- https://support.apple.com/en-us/HT212978 (Advisory)
- https://support.apple.com/en-us/HT212980 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30987
- CVE-2021-30950
- CVE-2021-30960
- CVE-2021-30986
- CVE-2021-30966
- CVE-2021-30926
- CVE-2021-30942
- CVE-2021-30957
- CVE-2021-30958
- CVE-2021-30935
- CVE-2021-30945
- CVE-2021-31007
- CVE-2021-31013
- CVE-2021-31000
- CVE-2021-30977
- CVE-2021-30939
- CVE-2021-30981
- CVE-2021-30996
- CVE-2021-30982
- CVE-2021-30937
- CVE-2021-30927
- CVE-2021-30980
- CVE-2021-30949
- CVE-2021-30993
- CVE-2021-30955
- CVE-2021-30976
- CVE-2021-30990
- CVE-2021-30943
- CVE-2021-31009
- CVE-2021-30971
- CVE-2021-30973
- CVE-2021-30929
- CVE-2021-30979
- CVE-2021-30940
- CVE-2021-30941
- CVE-2021-30995
- CVE-2021-30968
- CVE-2021-30946
- CVE-2021-30947
- CVE-2021-30975
- CVE-2021-30944
- CVE-2021-30972
- CVE-2021-30767
- CVE-2021-30964
- CVE-2021-30970
- CVE-2021-30965
- CVE-2021-30934
- CVE-2021-30936
- CVE-2021-30951
- CVE-2021-30952
- CVE-2021-30984
- CVE-2021-30953
- CVE-2021-30954
- CVE-2021-30938
- CVE-2021-30916
- CVE-2021-30962
- CVE-2021-30956
- CVE-2021-30992
- CVE-2021-30983
- CVE-2021-30985
- CVE-2021-30991
- CVE-2021-30998
- CVE-2021-30997
- CVE-2021-30967
- CVE-2021-30988
- CVE-2021-30932
- CVE-2021-30948
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-30944.
What is the severity rating of CVE-2021-30944?
The severity rating of CVE-2021-30944 is medium, with a rating of 5.5.
Which Apple products are affected by CVE-2021-30944?
CVE-2021-30944 affects Apple iOS, iPadOS, watchOS, macOS Monterey, and tvOS.
How can a malicious app exploit this vulnerability?
A malicious app can exploit CVE-2021-30944 by enabling additional logging to access data from other apps.
How can I fix CVE-2021-30944?
CVE-2021-30944 is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, and tvOS 15.2. Make sure to update your Apple devices to the respective fixed versions.
- collector/apple-support
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/references
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple macos monterey
- canonical/apple watchos
- canonical/apple ipados
- canonical/apple iphone os
- canonical/apple macos
- version/apple macos/12.0.0
- canonical/apple tvos
- canonical/apple ios